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Abstract 

The hardness to solve an unstructured quantum search problem by a stan- 
dard quantum search algorithm mainly originates from the low efficiency to 
amplify the amplitude of the unknown marked state in the Hilbert space of 
an n— qubit pure-state quantum system by the oracle unitary operation as- 
sociated with other known unitary operations. A standard quantum search 
algorithm generally can achieve only a square speedup over the best known 
classical counterparts. In order to bypass this square speedup limitation it is 
necessary to develop other type of quantum search algorithms. In the paper 
an oracle-based quantum dynamical method has been developed to solve the 
quantum search problem in the cyclic group state space of the Hilbert space. 
The binary dynamical representation for a quantum state in the Hilbert 
space of the n— qubit quantum system is generalized to the multi-base dy- 
namical representation for a quantum state in the cyclic group state space. 
Thus, any quantum state such as the marked state and its corresponding 
oracle unitary operation in the cyclic group state space may be described 
completely in terms of a set of dynamical parameters that are closely related 
to the symmetric property and structure of the cyclic group. The quantum 
search problem then may be solved through determining the set of dynami- 
cal parameters that describe completely the marked state instead by directly 
measuring the marked state which is a necessary step in the standard quan- 
tum search algorithm. The quantum dynamical method makes it possible to 
manipulate at will the unknown marked state and its oracle unitary opera- 
tion. By a similar method used extensively in the hidden subgroup problems, 
a cyclic group state space may be formed by mapping all the group elements 
of a cyclic group one-to-one onto the specific states of the Hilbert space of the 
n— qubit quantum system. It carries the symmetric property and structure 
of a cyclic group. An unstructured quantum search process in the Hilbert 
space may be affected greatly by the symmetric property and structure of the 
cyclic group when the quantum search problem is solved in the cyclic group 
state space. When the cyclic group is high symmetric, that is, the cyclic 
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group with order p is a product group of many cyclic subgroups and each 
cychc subgroup has an order ~ O(logp), the quantum search problem in the 
cyclic group state space could be solved better through reducing it from the 
cyclic group state space with dimension p to the cyclic group state subspaces 
with dimension ~ O(logp) of these cyclic subgroups, for any quantum search 
problem can be efficiently solved in these subspaces due to their much small 
dimension. The main attempt of the paper is to make use of the symmetric 
properties and structures of groups to help solving the unstructured quantum 
search problem in the Hilbert space. It is shown how the quantum search 
process could be reduced efficiently from the cyclic group state space to its 
cyclic group state subspaces with the help of the symmetric property and 
structure of the cyclic group on an ideal universal quantum computer. 

1. Introduction 

The quantum search is tremendously valuable as it has an extensive ap- 
plication in computation science. In classical computation most important 
problems are either polynomial-time or NP-complete [1]. The conventional 
computers based on the classical physical principles are much suitable for 
solving efficiently the polynomial-time problems, but inherently they are not 
enough powerful to treat efficiently all the NP-hard problems [1]. On the 
other hand, it has been shown that all the NP-complete problems in the 
classical computation could be solved efficiently on a quantum computer 
if there existed a polynomial-time unstructured quantum search algorithm. 
Thus, a great progress could be achieved in quantum computation if an 
efficient quantum search algorithm could be found. In the past decade a 
great effort has been devoted to attacking this extremely important prob- 
lem in quantum computation. A number of quantum search algorithms [2- 
13] have been proposed and developed since the standard Grover quantum 
search algorithm was suggested [2] . The famous include the standard Grover 
search algorithm [2] , the quantum adiabatic search algorithm [4, 5] , and the 
amphtude-amphfication search algorithm [6] . Most of these oracle-based or 
block-box-based quantum search algorithms are based on the quantum-state 
tomographic method. These quantum search algorithms usually start with 
a superposition of the Hilbert space of a pure-state quantum system, then 
perform an iterative sequence of unitary operations which include the or- 
acle unitary operation and other known unitary operations to amplify the 
amplitude of the marked state of the quantum search problem, and after 
the unitary operation sequence measure the generated state, in which the 
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marked state has a high probabihty (~ 1), to output directly the comput- 
ing result, i.e., the complete information of the marked state. Since the 
efficiency is low to amplify amplitude of the marked state with these uni- 
tary operation sequences these search algorithms usually can only achieve 
a square speedup over the best known classical counterparts. It has been 
proven that this square speedup for all these unstructured quantum search 
algorithms is optimal [3, 6, 9, 13]. More generally, it has been shown that 
many oracle-based quantum algorithms (not limited to the quantum search 
algorithms) based on the quantum-state tomography are subjected to poly- 
nomial bounds in speedup [14], that is, these quantum algorithms can only 
achieve a polynomial speedup over their best classical counterparts. In order 
to bypass this speedup obstacle inherently for the oracle-based quantum al- 
gorithms based on the quantum-state tomography it is necessary to develop 
other types of quantum algorithms to solve the quantum search problem and 
other problems [15]. Due to the fact that there is a low efficiency to amphfy 
the amplitude of the marked state in these quantum search algorithms [2, 3, 
6, 15], in developing new type of quantum search algorithms a direct quan- 
tum measurement on the marked state with a high probability (~ 1) should 
be avoided becoming a necessary step so that amplification of the amplitude 
of the marked state may not be the key component in algorithm, while the 
quantum measurement to output the computing results could be carried out 
on those states which are closely related to the marked state and carry the 
complete information of the marked state [15]. It is particularly important to 
be able to manipulate at will any quantum state even the unknown marked 
state in the Hilbert space in developing efficient quantum algorithms. This 
is an important step towards the goal to realize that any quantum state in 
the Hilbert space of an n— qubit quantum system is able to be described and 
characterized completely in a parameterization form [15]. Such a parame- 
terization description for a quantum state is different from the conventional 
quantum-state tomographic method. Since any quantum state in the Hilbert 
space can be described and characterized completely by a set of dynamical 
parameters called the quantum-state unit-number vector [15] and there is 
a one-to-one correspondence between the oracle unitary operation and the 
marked state in the quantum search problem, it becomes possible to manip- 
ulate at will the oracle unitary operation and the unknown marked state. 
Due to the fact that the unknown marked state can be described completely 
by the set of dynamical parameters it is possible to solve the quantum search 
problem by determining the set of dynamical parameters instead directly 
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through measuring the marked state [15]. This gives a possibihty to avoid 
a direct amphfication of amphtudc of the marked state which is a key com- 
ponent in the conventional quantum search algorithms [2-13]. This strategy 
to solve the quantum search problem opens a large space to develop new 
quantum search algorithms. 

Generally, the unknown marked state of the quantum search problem can 
be any possible state of the Hilbert space and the quantum search space for 
the problem must contain the marked state in a quantum search algorithm. 
Therefore, for these conventional quantum search algorithms the quantum 
search spaces usually are taken as the whole Hilbert space and hence the ini- 
tial state is a superposition over the whole Hilbert space. The usual quantum 
search algorithms also have showed that the low efficiency to amplify the am- 
plitude of the marked state is strongly dependent on the dimensional size of 
the search space, that is, the efficiency generally is inversely proportional to 
the square root of the dimensional size of the search space [2, 3, 6] and it has 
been shown that the efficiency is optimal [3, 6, 9, 13]. One possible scheme 
to increase this efficiency therefore could be that the quantum search space 
is limited to a small state subspace of the Hilbert space for a quantum search 
problem [16]. Generally, this scheme will meet difficulty and is not feasible 
if the marked state is not in the subspace. To make the scheme feasible one 
must convert the marked state from the whole Hilbert space to the small sub- 
space. Because there is the rotation symmetry in spin space in the n— qubit 
quantum spin system the whole Hilbert space of the spin system can be di- 
vided into (n + l) state subspaces according to the angular momentum theory 
in quantum mechanics and it can be shown that any unknown quantum state 
such as the marked state can be converted efficiently from a small subspace 
into a larger subspace in the Hilbert space [16]. This fact directly leads to 
that in a single n— qubit quantum system the quantum search problem can 
be reduced efficiently from the whole Hilbert space into its largest subspace. 
This search space reduction speeds up the conventional quantum search pro- 
cess, although this speedup is limited and does not change essentially the 
computational complexity for the quantum search problem. However, it is 
very important for the fact that the symmetric properties and structures of 
quantum systems may be exploited to speed up the quantum search process, 
for one can go a further step to use the special group symmetric properties 
and structures to help solving the quantum search problem. This idea will 
play an important role to guide the construction of quantum search algo- 
rithms in the cyclic group state space in the paper. Generally, the whole 
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Hilbert space of the n— qubit quantum system may not have some specific 
group symmetric properties and structures, but a specific state subset of the 
Hilbert space could carry the symmetric property and structure of a specific 
group such as a cyclic group. Then quantum computation may be affected 
greatly by the symmetric property and structure of the group if it is carried 
out on the state subset. In order to make use of the symmetric property 
and structure of a finite group in developing new quantum algorithms one 
may first form this specific state subspace in the Hilbert space of the n— qubit 
quantum system. By mapping all the group elements of the group one-to-one 
onto these specific states of the Hilbert space, which means that each group 
element corresponds one-to-one to a state of the specific state subspace and 
hence the mapping is isomorphic, then all these specific states form a state 
subspace of the Hilbert space and evidently this subspace is an invariant or 
closed state subspace under the action of the group operations. This state 
subspace is called the group state space of the Hilbert space. This subspace 
can be thought of as an artificially-formed state space of the Hilbert space 
which carries the information of the symmetric property and structure of 
the group. The dimension of the group state space is just the order of the 
finite group. The similar scheme to the group state space has been exten- 
sively used previously in the hidden subgroup problems [17]. If the group is 
high symmetric, which means that the group is a product of many its fac- 
tor subgroups, then the corresponding group state space also may contain 
many state subspaces which one-to-one correspond to these factor subgroups 
of the group. Since the dimensional size of the group is a product of the 
dimensional sizes of all these factor subgroups, the dimension of the group 
state space is also a product of those of the group state subspaces of the 
factor subgroups. The dimensional size (denoted as p here) of the group 
state space can be very large, p ~ 2", and may increase exponentially as 
the qubit number, but since it is a product of the dimensional sizes of many 
state subspaces of these factor subgroups the dimensional sizes of the state 
subspaces of the factor subgroups can be much small, ~ O(logp), and may 
increase only polynomially as the qubit number. Then the quantum search 
problem in the whole group state space would be solved efficiently if the 
problem could be efficiently reduced from the whole group state space to the 
state subspaces of these subgroups. As the main purpose, the paper intends 
to achieve such a search space reduction for the quantum search problem in 
the cyclic group state space with the help of the symmetric property and 
structure of a cyclic group. Here the symmetric property and structure of 
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a cyclic group are employed to help solving the quantum search problem as 
a cyclic group is one of the simplest groups and its symmetric property and 
structure are very simple and have been studied in detail and thoroughly [18]. 

2. Quantum search model in the cychc group state space 

2.1. The binary dynamical representation and the multi-base 
dynamical representation of quantum states 

In the Hilbert state space of an n— qubit pure-state quantum system a 
quantum state can be characterized and described completely by a set of n 
dynamical parameters {af. — ±1, k — 1,2, which has been called the 

quantum-state unit-number vector in the papers [15]. This is a parameter- 
ization description for quantum states in the 2"— dimensional Hilbert space 
and different from the conventional quantum-state tomographic method. By 
measuring the set of the dynamical parameters one can determine uniquely 
the corresponding quantum state. This dynamical description picture not 
only is able to describe completely a quantum state \s) in the 2"— dimensional 
Hilbert space of the pure-state quantum system but also is used to describe 
the corresponding quantum state Pg = \s){s\, which is represented by a diago- 
nal density operator, in the Liouville operator space of the quantum ensemble 
of the quantum system. For instance, in the Hilbert state space a conven- 
tional computational basis state \s) can be described completely with the 
parameter vector {a^} by \s) = 01=1 (i^fc + '^fe'S'fe) with Tk = |Ofc) + |lfc) 
and Sk = ^(|Ofc) — |lfc)), while in the corresponding Liouville operator space 
the quantum state is described completely by the diagonal density operator 
Ps — — 0fc=i(|-^A; + (^k-^kz) which is also determined uniquely by the 

vector {a|}. By the parameter vector {a^} one can set up a one-to-one cor- 
respondence between a quantum state \s) or Pg = \s){s\ and the selective 
rotation unitary operation Cs{6) = exp{—i6Ds) with the Hermitian diagonal 
operator Dg — \s){s\ = (8)fc=i(|-^fc + <^k^kz)-, which selectively acts on only 
the quantum state |s) or p^ and is described completely also by the vector 
{a^}. The diagonal operator Dg is called the quantum-state diagonal op- 
erator since it is a diagonal operator and also equals the state p^ formally. 
The unitary evolution process of a quantum system or its corresponding 
quantum ensemble under the action of the selective rotation unitary oper- 
ation Cs{9) is described completely by the vector parameters {a%} and in 
this sense the vector parameters {af.} are also called the dynamical param- 
eters. The quantum-state diagonal operator Dg makes it possible for one 
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manipulating at will the evolution process of an unknown quantum state in 
the Hilbert space of a quantum system. This representation for the quantum 
state via the dynamical parameter vector {a^} is called the binary dynamical 
representation, for the vector parameters {a|} can take only two values +1 
and —1. In the quantum dynamics any quantum-state search problem can be 
reduced to determining the dynamical parameter vector {a|} of the marked 
state. The direct measurement on the marked state to output the infor- 
mation of the marked state in the conventional quantum search algorithms 
[2-13] therefore could not be necessary in the quantum dynamical method, 
for there are a number of possible methods in quantum dynamics which work 
either in a pure-state quantum system or in a quantum ensemble to deter- 
mine the dynamical parameter vectors {a^} for quantum states including the 
marked state [15]. Therefore, the quantum search algorithms based on the 
quantum dynamics have an important difference from the conventional ones 
[2-13] that it is not necessary to measure directly the marked state to output 
the complete information of the marked state in algorithm. The quantum 
dynamic method opens a large space to develop new type of quantum search 
algorithms. 

Besides the binary dynamical representation for a quantum state in the 
Hilbert space of an n— qubit quantum system it is possible to use other multi- 
base dynamical representations to describe completely a quantum state of a 
quantum system. The multi-base dynamical representations for a quantum 
state could be a better choice for the quantum search problem in the cyclic 
group state space. Before the multi-base dynamical representations can be 
described the group state space of a cyclic group is firstly defined in the 
Hilbert space. A cyclic group is an Abelian group in which any group ele- 
ments are commutable to one another [18]. A cyclic group G can be generated 
by a fixed generator that is, G = (g) = {E,g,g'^, ...,g""^^^}, here E is the 
unity element and Ur the order of the cyclic group. In an analogue way to 
the method used extensively in the hidden subgroup problems [17], now each 
group element of the cyclic group G is mapped one-to-one onto the specific 
state of the Hilbert state space of an n— qubit quantum system. Then these 
specific states of the Hilbert space that correspond to all the group elements 
of the cyclic group form a state subset and this state subset is the cyclic 
group state space of the Hilbert space. The cyclic group state space is an 
invariant state subspace under the action of any group operation (element) 
of the cyclic group. Suppose further that the unity element E of the group 
G is mapped onto the specific state \iPq) of the Hilbert space, then the cyclic 
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group state space S{G) may be given formally by 

S{G) = {|v9o),^|<^o),/IV'o),-,^?"''"Vo)}- 

Here the cyclic group state space S{G) is within the Hilbert space and its 
dimension is just the order rir of the cyclic group. In quantum computa- 
tion a convenient state basis in the Hilbert space of an n— qubit quantum 
system is the conventional computational basis. This basis set consists of 
the integer states {|Z2n)} = {|0), |1), |2),..., |2" — 1)}. Then the state ba- 
sis set of the cyclic group state space of the Hilbert space is the specific 
state subset of the integer state set {\Z2n)}. Now consider the integer set 
— {0, 1, 2, m — 1}. The integer set is a Ring (Z^ — Z/mZ) under 
the modular arithmetic operation (modm) in number theory [19] and also an 
additive cyclic group under the modular (m) additive operation [18, 20]. As 
the multiplicative operation is often used in quantum computation, the inte- 
ger set = {0, 1, — 2} can be mapped by the modular exponentiation: 
z — > g^modp to the positive integer set Z^ — {^r^modp} = {1, 2, — 1}, 
where the integer z G Zp_i and p is a known prime and g a known prim- 
itive root (modp). The integer set Z^ forms a multiplicative cyclic group 
under modular multiplication operation [18, 20]. Both the additive cyclic 
group Zp-i and the multiplicative cyclic group Z^ have an order p — 1. 
Both the cyclic groups have a one-to-one correspondence. In fact, all the 
same order cyclic groups are isomorphic to one another [18]. Hereafter p 
is denoted as a known prime, g as a primitive root or a generator of a 
cyclic group, and Cm the multiplicative cyclic group such as Z+ with or- 
der m. If any of the two cyclic groups is mapped onto the Hilbert space, 
one obtains their corresponding cyclic group state spaces. For the additive 
cyclic group Zp_i the mapping between the group elements and the corre- 
sponding states in the Hilbert space may be given conveniently by s ^ \s) 
for the group element s G Zp_i = {0,1,.. .,p — 2} (|<^o) = for 
the multiplicative cyclic group Cp-i the mapping may be conveniently writ- 
ten as f{s) — g^modp — > \g^modp) {\(Pq) — |1)) for the group element 
g^ = g^modp G Z^ = {1,2, ...,p — 1}. Therefore, any quantum state of the 
cyclic group state space S'(Cp_i) = {\g^ modp)} = {|1), |2), |p — 1)} of the 
multiplicative cyclic group (Cp_i) can be expressed generally as 

I'Ps) = Is' modp), s G Zp_i, 

where the state \Lpg) is also a conventional computational base. Since (pg> 
for any s G Zp_i the state |0) is not included in the cyclic group state space 
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5'(Cp_i). There is a one-to-one correspondence between the modular expo- 
nential function /(s) = g'^ modp of the integer set and the index s of the 
integer set Zp^i. The index s is really the discrete logarithmic function of 
the function /(s), that is, s = loggf{s) with g a logarithmic base. In other 
words, the index s is the inversion function of the modular exponential func- 
tion f{s) — g^modp, i.e., s = f{s)~^. In classical computation the modular 
exponential function is not hard to be computed, but the discrete logarithmic 
function usually is hard and this forms the basis of the classical public secure 
key cryptography based on the discrete logarithms [21]. However, the Shor 
discrete logarithmic quantum algorithm shows that the discrete logarithmic 
function now is not hard yet to be computed in quantum computation [22]. 

Actually, the additive cyclic group state space S{Zp_i) is just the state 
subset consisting of the first p — 2 conventional computational bases 

of the Hilbert space {1^2^)}. Apparently it can not see any difference be- 
tween the additive cychc group state space S{Zp^i) and the state subset 
of the Hilbert space if one does not care about the symmetric prop- 
erties and structures of the two state subsets in the quantum search problem. 
However, their difference could be great if their symmetric properties and 
structures are taken into consideration. For the multiplicative cyclic group 
state space S{Cp-i) whose state bases are the modular exponentiation states 
{\g^ modp)}, one may easily imagine that there exists difference between the 
two state subsets S'(Cp_i) and However, only from the symmetric 

property and structure of the cyclic group state space can one understand 
deeply that the difference could lead to a completely different result in quan- 
tum computation. According to the fundamental theorem of arithmetic (see 
the Theorem 2 in Ref. [19]) the order p — 1 of the multiplicative cychc group 
Cp_i which is also the dimension of the cyclic group state space S'(Cp_i) 
can be expressed as a product of distinct primes, p — 1 = p"^ p^ ■ ■ -pI"" ■, where 
Pi,P2, ■■■,Pr are distinct primes and the exponents ai,a2,...,ar > 0. Then 
correspondingly the cyclic group Cp-i can be decomposed as a product of its 
factor cychc subgroups (see Chapter One and Two in Ref. [18]) : 

Cp-l = Cp^l X Cp-^^2 X ... X Cpar, (1) 

where the factor cychc subgroup C^h: has an order p^'^ for A; = 1, 2, r. Thus, 
the order p — 1 of the cyclic group Cp_i is a product of the orders {p'^} of the 
factor cyclic subgroups {C ^^k}. This shows that though the order p — 1 of the 
cyclic group Cp_i can be a large number (even p ~ 2"), the orders {p^*'} of 
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the factor cyclic subgroups {C a^} may take much small numbers ~ O(logp). 

Just like the cyclic group state space S{Cp^i) the cyclic group state subspace 
S{C °-k ) (fc = 1, 2, r) also can be formed by mapping all the elements of the 
cyclic subgroup Cp-^k onto the specific states of the Hilbert space, and it is a 
state subspace of the cyclic group state space S{Cp-i) and also of the Hilbert 
space. Since the dimensional size of a cyclic group state space is just the order 
of the cychc group, the cychc group state subspaces {5'(C "fc)} may also 
have much small dimensional sizes ~ 0(\ogp) even if the whole cyclic group 
state space S'(Cp_i) has a large dimension {p ~ 2"). It is well known that a 
problem could be difficult to be solved in a large dimension, but generally 
it may be fast solved in a small dimension even in classical computation. 
Since the quantum search speed for a search problem is generally inversely 
proportional to the square root of the dimensional size of the problem [2, 
6], then the quantum search problem could be efficiently solved even in the 
whole cyclic group state space S{Cp-i) if it could be efficiently reduced from 
the whole cyclic group state space to the state subspaces {5'(C of the 
factor cyclic subgroups {C <^k}. Thus, the main purpose in the paper is how 

'^k 

to achieve the reduction for the quantum search problem from the cyclic 
group state space S'(Cp_i) to the cychc group state subspaces {S{C ^^k)}. 

^ k 

A quantum state \s) of the additive cyclic group state space S{Zp_i) may 
be described completely by the dynamical parameter vector {a|}. Since 
g^modp is an integer of the positive integer set Z+ any quantum state 
\g^modp) of the cyclic group state space S{Cp-i) is a usual computational 
basis and also can be described completely by the dynamical parameter vec- 
tor {a|}, where the parameter vector {a^} may not be equal to the vector 
{al} and the two vectors {a|} and {a^} are related by the one-to-one corre- 
spondence s g^modp. However, a better method to describe completely 
a quantum state \g^modp) of the multiplicative cyclic group state space 
S(Cp-i) could be to use the multi-base dynamical representation in quan- 
tum computation. Notice that the cyclic group Cp_i is a product of the cyclic 
subgroups {C °-k}, each of which has an order pt'' . Suppose that the cyclic 

^k 

subgroup Cp«fc is generated by a generator gk, that is, Cp^fe = {gt)- Then 
any element of the cyclic subgroup C '^k can be generally written as g''^ for 
the index 1^ — 0,1, ■■■■,p'^ — 1. Corresponding to the product decomposition 
(1) for the cychc group Cp_i each group element g^ of the cychc group Cp_i 
is also a product of the group elements {g^^} of the factor cyclic subgroups 
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9' = 9r'x9r'x-x9r', (2) 

where the generator of the subgroup C "fe can written as = g^'^ modp 
[18] for k = 1,2, ...,r and the positive integers and will be determined 
later. The product decomposition (2) for a group element of the cyclic group 
Cp-i is really written according to the Chinese remainder theorem (see the 
Theorem 121 in Ref. [19]). Actually, there exists a one-to-one correspondence 
between the index s of the group element g^ of the cyclic group Cp_i and the 
index vector {s^} of the group elements {fi'^'"*'"} of the factor cyclic subgroups 
{Cpttfe}. Note that the order p — 1 of the cyclic group Cp_i is decomposed 
as a product of the distinct prime factors {pl^} : p — I = Pi^p'2 ■■■PT ■ 
convenience, here denote that ruk — plj!' for A; = 1, 2, r, and p — 1 — m — 
71111712. ..mr. Evidently, the integers {ruk} are coprime to one another in pair, 
that is, the highest common divisor for any pair of the integers mj and TUj 
equals one: (mj, TUj) = 1 for 1 < i < j < r. Since the index s = s mod(p — 1) 
and if the index is written as — smodm^ for k — 1,2, ...,r, then the 
index s can be uniquely expressed as a linear combination (mod(p — 1)) of 
the indices {sfe} according to the Chinese remainder theorem [19], 

s = {n\MiS\ -\- n2M2S2 + ... + rirMrSr) mod(p — 1), (3) 

where p — 1 = 7nkMk for k = 1,2, ...,r. Note that (m^, Mk) = 1. The integer 
rifc is just the multiplicative inverse to the integer (modmfc) that satisfies 
n^Mk — 1 modmfc. Using the known integers and one can efficiently 
calculate the integer by the Euclidean algorithm [20] . Because the integer 
Mfc satisfies = {p — l)/iTik, that is, is a divisor of the order p — 1, 
it follows from the Theorem 1.4.3 in Ref. [18] that the generator gk of the 
cyclic subgroup C j^k is just gk = g'^'' modp and the order of the subgroup 
Cpi^k is pI'' and hence the cyclic subgroup is written as C^afe = {g^'' modp). 
Then the state subspace of the cyclic subgroup C^k = {g^'' modp) is given 

by 

S{Cpl^) = {lig'^'Y' raodp),k = 0, 1, - 1}. 

The dimension of the state subspace S{Cj<^^k) is just the order p^^ of the 
cyclic subgroup C ^k . The cyclic group state subspace S{C ^k) is an invariant 
subspace under the action of any group operation g]^ of the cychc subgroup 

Pk 
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Given a set of the indices {sk} for the group elements {(^^fe)™fc«fc modp} of 
the factor cyclic subgroups {C'p^fc} with the generators {g^'' modp}, here the 
integers {n^} arc known, then according to the equations (2) one can compose 
a unique group element g'^modp for the cyclic group Cp_i with the index s 
determined by the equation (3). In turn, if one is given any element modp 
of the cyclic group Cj,_i with the index s, then according to the equation 
(2) the element can be decomposed uniquely as a product of the elements 
{(5'^^'=)"'='''= modp} of the cyclic subgroups {C ^fc} and the indices {s^} are 
given by Sk = s mod rrik- Therefore, there is a one-to-one correspondence 
between the index s of the group element g^ modp of the cyclic group Cp—i 
and the index set {s^} of the group elements {(gr^^)"*** modp} of the factor 
cyclic subgroups {C "fe}. This one-to-one correspondence shows that one can 
also use the set of indices {sk} to describe completely the index state |s) 
and the cyclic group state \g'^modp) as well in addition to the dynamical 
parameter vector {a|}. Furthermore, because Sk = smodp^'^ the index Sk 
can be expanded in the field GF{pl^) [19, 20, 21], 



where the coefficients {h^i} satisfy < /i^^ < Pk for Z = 0, 1, ak — I and 
k = 1, 2, r. This expansion could be thought of as the p^— base expansion 
for the index Sk similar to the conventional binary expansion for a number. 
Clearly, given the prime pk the index Sk = smodp^* is determined uniquely 
by the coefficients h^i for Z = 0, 1, a/j — 1. Therefore, it is needed r indices 
{sk} or Ylk=i coefficients {h%i\ to describe completely the index state |s) 
or the cyclic group state \g'^ modp), while in the binary representation it need 
only n parameters {a^} for the complete description for the index state \s) 
in the Hilbert space of an n— qubit quantum system. It seems to be that the 
multi-base representation {h^i = 0, 1, ...,Pk — 1} or the index vector {sk} for 
the index state |s) or the cyclic group state \g^modp) is more complicated 
than the binary representation {a^ = +1, —1} in the Hilbert space. How- 
ever, the importance is that the multi-base representation {h'li} or the index 
vector {sk} is related to the symmetric property and structure of the cyclic 
group Cp-i, while this symmetric property and structure could have a great 
impact on the quantum computation that is carried out in the cyclic group 
state space. Thus, it could be better in the quantum search problem in the 
cyclic group state space that the binary dynamical representation {a^} is 




(4) 



1=0 
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replaced with the index vector {sk} or the multi-base dynamical representa- 
tion {h'li} to represent completely the quantum states and to describe the 
quantum dynamics of the quantum search process. Now in the cyclic group 
state space the quantum search process to find the marked state is just to 
determine completely the index vector {sk} or the parameter vector {hli}, 
which is the same process as the previous one that searching for the marked 
state is just to determine the dynamical parameter vector {a^} [15]. 

2.2. The oracle unitary operation acting on the cyclic group 
state space 

The quantum search process in the cyclic group state space may be car- 
ried out either in the additive cyclic group state space S{Zp-i) or in the 
multiplicative cyclic group state space S{Cp^i). Correspondingly the marked 
state of the search problem can be represented either by the index state \s) of 
the additive cychc group state space S{Zp_i) or the modular exponentiation 
state \g^modp) of the multiphcative cychc group state space S{Cp-i). The 
index state |s) and the modular exponentiation state \g'^modp) can be effi- 
ciently converted into each other by a unitary transformation which is given 
in next section. It might be more convenient that the quantum search pro- 
cess is carried out in the multiplicative cyclic group state space 5'(Cp_i) as 
the multiplicative unitary operations usually are easily constructed and used. 
Suppose that the quantum search process is used to solve a specific problem 
such as an NP problem which has only one solution and the possible solution 
to the problem is within the integer set = {g'' modp} = {1, 2, ...,p — 1}, 
here assume that the possible solution can be represented with the integer 
index variable x e Z^. In the quantum search problem there is a block box 
or an oracle to compute a function f{x) for the variable x = g^ modp G Z^. 
If the variable x = g'^modp is the solution to the problem, then the function 
f{x) = f{g^ modp) = 1; otherwise, f{x) = 0. The quantum computational 
process to compute the function f{x) in the block box can be represented 
by a unitary operation. This basic unitary operation is called the oracle uni- 
tary operation. It is the unique unitary operation that can access directly 
the unknown marked state Ig'^raodp) in the quantum search problem, where 
the marked state corresponds to the unique solution x = g'^modp to the 
problem. Generally, if the marked state is defined as l^'^'modp), then the 
corresponding oracle unitary operation Ug — Uos{0) in the cyclic group state 
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space 5'(Cp_i) can be defined by 

Uos{0)\g^ mod p)\a) = exp[— modp)]|(y''^ modp)|a) 

_ J exp(— i6')|(y'*modp)|a), if x = s 
1^ \g^modp)\a), if x 7^ s 

where the auxihary state \a) = :^(|0) — |1)). According to this definition the 
oracle unitary operation Uos{d) is really equivalent to the selective rotation 
operation in the cyclic group state space S{Cp-i) : 

Uos{e)^eM-ieDs{g)]. 

Here, the quantum-state diagonal operator Ds{g) [15] which is applied to the 
cyclic group state space 5'(Cp_i) can be generally expressed in terms of the 
cyclic group state, 

Ds{g) — \g^ mo(lp){g^ m.o(lp\. 

Note that the diagonal operator Ds{g) is different from the conventional one 
Dg = \s){s\ in the Hilbert space of an n— qubit quantum system. Actually, 
the diagonal operator Ds{g) can also be expressed in terms of the dynamical 
parameter vector {6^}, 

k=l 

but here the vector {6| — ±1} corresponds to the state \g^in.odp), while the 
conventional vector {a^ = ±1} is assigned to the index state |s) and the state 
Ds — \s){s\. Through the quantum-state diagonal operator Ds{g) one can set 
up one-to-one correspondence between the oracle unitary operation Uos{d) 
and the cyclic group state l^f^modp). This correspondence makes it possible 
to calculate explicitly the time evolution of a quantum system under the 
action of the oracle unitary operation Uos{0) [15], and it may also provide a 
convenience for manipulating at will the time evolution of a quantum system 
by the oracle unitary operation. If the auxiliary state is taken as \a) — |0), 
then the oracle unitary operation Uo is simply defined as 

C/o,|/modp)|0) = |/modp)|/(^''modp)) 

{|5f*modp)|l), li X = s 
\g^modp)\Q), \i X ^ s 
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The quantum search problem in the cychc group state space is how to find 
the marked state Ig"^ modp), given the oracle unitary operation Uos- This is 
different from the quantum discrete logarithmic problem which states that 
given a positive integer ip^ such that ipg = g^modp, how to compute the 
index s, while the quantum search problem is really equivalent to that given 
the oracle unitary operation Ugs, how to determine the index s. 

The conventional quantum search process usually is carried out in the 
2"— dimensional Hilbert space of a single n— qubit quantum system. If besides 
the given work register used for searching task there are also other auxiliary 
registers, then the oracle unitary operation Uo could be thought of as a 
non-selective oracle unitary operation with respect to any states of those 
auxiliary registers, since in addition to the auxiliary state \a), which loads 
the functional values f{g^modp), the oracle unitary operation Uo can only 
apply to the work register. If there are any other auxiliary registers the 
oracle unitary operation Uo will not make any effect on any states of all 
these auxiliary registers. If the quantum search process is carried out in such 
a multi-register quantum system that contains a work register and several 
auxiliary registers in addition to the auxiliary state \a) and each register 
could consist of a single n— qubit quantum subsystem, then in order that the 
search space still has the same dimensional size as before all the states of 
the auxiliary registers should be set to a given state, e.g., the state |R0) = 
|00...0). This search space is really a small subspace of the whole Hilbert space 
of the multi-register quantum system. Corresponding to this search subspace 
the subspace-selective oracle unitary operation Uo should be defined by 



where the states l^') and |R0) belong to the auxiliary registers and the 
oracle unitary operation works in the cyclic group state space S'(Cp_i) of 
the work register. Here |R0) also denotes the auxiliary register library with 
the specific state |00...0) (see next sections). The subspace-selective oracle 
unitary operation Uos{d) acts on selectively the state |R0) but does not 
have any effect on any other state |^) of the auxiliary registers. It is really 
equivalent to the selective rotation operation in the Hilbert space of the 



exp(— i^)|RO)|g'* modp)|a), 
if X = s and |^) 



RO); 





V 



if X 7^ s and |\E') = 
*)|^^modp)|a), if |*) |R0); 



RO); 
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multi-register quantum system where the work register is in the cydic group 
state space S'(Cp_i), 

with the diagonal operator Ds{g) = |R0)|5''*modp)((y'*'modp|(R0|. Why us- 
ing many auxiliary registers here? This is mainly because the conventional 
mathematical-logic gates usually need to use a large space to perform their 
reversible operations, while these mathematical-logic gates have been used 
extensively in constructing the quantum search algorithms in the Hilbert 
space [16] and also in the cyclic group state space (see next sections). How- 
ever, it must be careful as there could be a potential risk that the auxiliary 
registers could enlarge greatly the search space for the quantum search prob- 
lem and as a result the quantum search process could become degraded. 

The effect of the oracle unitary operation Ug, which acts on only the 
marked state, on the evolution process of an n— qubit quantum system is so 
small that it is hard to be detected quantum mechanically when the qubit 
number n is large [2, 3, 6, 15]. This results in that the quantum search prob- 
lem generally is hard to be solved in a large Hilbert space. Any superposition 
of the Hilbert space with dimension = 2" could be converted partly into 
the marked state under the action of the oracle unitary operation associated 
with other known quantum operations, but each time for the action this con- 
version efficiency of the marked state is proportional to l/\fN [2, 3, 6]. In 
order to achieve an observable amplitude for the marked state a standard 
quantum search algorithm needs to call ~ \fN times the oracle unitary op- 
eration and thus, the quantum search time to find the marked state with a 
high probability (~ 1) is proportional to the square root {s/Tj) of the dimen- 
sional size {N) of the search space which here is the whole Hilbert space. This 
search time therefore increases exponentially as the qubit number n. This low 
amplitude- amplification efficiency results in that a standard quantum search 
algorithm usually can have only a square speedup over the best known clas- 
sical counterparts, and it has been also shown that this square speedup is 
optimal and hence can not be further improved essentially [3, 6, 9, 13]. A 
number of quantum search algorithms [2-13] have been proposed to achieve 
this optimal efficiency (with respect to the dimensional variable N) which in- 
clude the standard Grover search algorithm [2], the amplitude-amplification 
search algorithm [6], and the quantum adiabatic search algorithm [4, 5]. All 
these search algorithms are based on the quantum-state tomography. A di- 
rect quantum measurement on the marked state is necessary to output the 
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information of the marked state in these search algorithms and hence it is 
required in algorithm that the amplitude of the marked state be first am- 
plified by a suitable unitary sequence that contains ~ \fN oracle unitary 
operations so that the probability for the marked state is high enough (~ 1) 
for observation. In recent years a great effort has been made to develop 
other type of quantum search algorithms [15, 16] in order to break through 
the square speedup limitation. These quantum search algorithms are based 
on the quantum dynamical principles. In these quantum-dynamical search 
algorithms a direct measurement on the marked state may not be necessary 
so that a direct amplification for the amplitude of the marked state could 
be avoided, instead the quantum measurement to output the computing re- 
sults could be carried out on some other states that are closely related to the 
marked state and carry the complete information of the marked state and 
the computing results are further used to obtain the complete information 
of the marked state [15]. The basis behind the quantum-dynamical search 
algorithms is that (i) any quantum state such as the unknown marked state 
in the Hilbert space can be described completely in a parameterization form 
by a set of dynamical parameters and the quantum searching for the marked 
state therefore is reduced to determining the set of the dynamical parame- 
ters; {ii) by the set of the dynamical parameter the oracle unitary operation 
and the unknown marked state is set up a one-to-one correspondence, and it 
becomes possible to manipulate at will the evolution process of a quantum 
system under the oracle unitary operation in the quantum search process. 
This quantum search method may avoid a direct quantum measurement on 
the marked state in the quantum search problem and hence it could not be 
necessary to achieve an enough high probability for the marked state to be 
observable. Regarding the fact that there is a low efficiency to amplify the 
amplitude of the marked state by the oracle unitary operation and this ef- 
ficiency is closely related to the dimensional size of the search space of the 
search problem, that is, the larger the search space, the lower the efficiency, 
one simple scheme to increase the efficiency is that the search space of the 
search problem is limited to a small subspace of the Hilbert space [16]. This 
scheme is feasible only if the marked state is in the subspace. Hence to make 
the scheme feasible one may convert the marked state from the whole Hilbert 
space to the subspace. It is well known that the structure of the Hilbert space 
of a quantum system generally is closely related to the symmetric property 
and structure of the quantum system. Because there is a rotation symmetry 
in spin space in the n— qubit quantum spin system according to the angular 
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momentum theory in quantum mechanics, the Hilbert space of the n— qubit 
spin system can be divided into (n + 1) state subspaces. Then it can be shown 
that the quantum search problem in the Hilbert space of the n— qubit spin 
system can be efficiently reduced from the whole Hilbert space to the largest 
subspace of the {n + 1) state subspaces [16]. The conventional quantum 
search process therefore may be sped up, although this speedup is limited 
and does not change essentially the computational complexity for the search 
problem. However, the importance for the fact that the symmetric proper- 
ties and structures of quantum systems may be employed to speed up the 
quantum computational process is that one may further use the symmetric 
property and structure of a group to help solving the quantum search prob- 
lem. This is just the main purpose of the paper that the symmetric property 
and structure of a cyclic group are employed to help solving the quantum 
search problem. 

2.3. The structural quantum search in the cychc group state 
space 

The conventional unstructured and structural search problems are re- 
ferred to the problems themselves [7, 8]. The structure for a quantum search 
problem in a cyclic group state space has a different sense from the con- 
ventional one. It is referred to the symmetric structure of the cyclic group 
used to help solving the unstructured quantum search problem in the Hilbert 
space of the n— qubit quantum system. A cyclic group is one of the simplest 
groups. It is an Abelian group and any two elements of a cyclic group are 
commutable to one another. Its property and structure have been studied 
in detail and extensively [18, 20]. As shown in equation (1), a cyclic group 
can be decomposed as a direct product of its factor cyclic subgroups be- 
cause every Abelian group can be decomposed as a direct product of cyclic 
groups [18]. The cyclic groups of prime order are the only Abelian simple 
groups. They have not any nontrivial and proper subgroup. A cyclic group 
of non- prime order must have a nontrivial and proper subgroup at least. 
Here, that a cyclic group is highly symmetric means that the cyclic group 
has many factor cyclic subgroups. Thus, a highly symmetric cyclic group 
can be expressed as a direct product of its factor cyclic subgroups, as shown 
in equation (1). The quantum search problem in the cyclic group state space 
is either unstructured or structural only dependent on the symmetric struc- 
ture of the cyclic group no matter what the quantum search problem itself 
is unstructured or structural in the Hilbert space of the n— qubit quantum 
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system. If the quantum search is performed in a cycUc group state space 
whose cychc group has a prime order, then it is said to be an unstructured 
quantum search. However, generaUy a quantum search is carried out in the 
cychc group state space of a highly symmetric cychc group so that the sym- 
metric property and structure of the cychc group can be employed to help 
solving the quantum search problem. Therefore, the quantum search pro- 
posed in the paper generally is structural in the cyclic group state space. 
Generally, the Hilbert space of the n— qubit quantum system does not have 
some specific group symmetric properties and structures, but a specific and 
artificial state subset of the Hilbert space which could be formed by mapping 
all the group elements of a specific group such as a cyclic group onto the 
Hilbert space may have the symmetric property and structure of the group. 
Then quantum computation which is carried out on the state subset may 
be affected greatly by the group symmetric property and structure. Con- 
sequently, though the quantum search problem in the Hilbert space of the 
n— qubit quantum system is unstructured, it is affected inevitably by the 
symmetric property and structure of the group if it can be reduced to and 
therefore is solved in the group state space. The effect of the group sym- 
metric properties and structures could lead to a significant speedup for some 
quantum computation processes. How the cyclic group symmetric property 
and structure influence on the speedup of the unstructured quantum search 
process in the whole Hilbert space is important research project that comes 
to be investigated in detail in the paper and in the future work. 

3. The efficient state transformation between the additive and 
multipUcative cychc group state spaces 

In the quantum factoring problem and the discrete logarithmic problem a 
number of reversible mathematical-logic operations such as the modular addi- 
tion, modular multiplication, and modular exponentiation unitary operations 
have been used extensively [22, 23, 24, 25]. In the reversible computation one 
basic principle to construct a reversible mathematical-logic operation is that 
all the input states are also kept together with the output states after the 
logic operation [26, 27]. A mathematical-logic operation usually needs to use 
many auxiliary registers so that the operation process can be made reversible. 
Both the classical irreversible computation and the reversible computation 
usually are equivalent in computational complexity in time and space [27, 28]. 
Therefore, the classical irreversible computation generally can be efficiently 
simulated by the reversible one. The reversible logic operations can be per- 
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formed in a quantum system as well, but they usually consume much more 
qubits in space than the conventional unitary operators quantum mechani- 
cally in the quantum system. They could influence on the unitary evolution 
process of a quantum system in a different manner from the conventional 
unitary operators quantum mechanically. This is because a reversible logic 
operation usually acts on only some specific states of the quantum system, 
while the conventional unitary operators quantum mechanically usually act 
on any states of the quantum system. It must be careful to use a reversible 
logic operation to manipulate the quantum dynamical process of a quantum 
system. A reversible mathematical-logic operation could be thought of as 
a selective unitary operation of a quantum system because there are usu- 
ally a number of quantum states of the quantum system independent of the 
action of the logic operation. Quantum physically there are a number of 
unitary evolution pathways in a multi-qubit quantum system, but under the 
reversible mathematical-logic operations there are only few unitary evolution 
pathways to be allowed in the quantum system. This just shows that the 
mathematical principles can make constraints on the unitary evolution pro- 
cess of a quantum system. On the other hand, quantum computation is a 
physical process or exactly a unitary evolution process quantum physically, 
as pointed out by Deutsch [29, 38]. Therefore, the quantum computational 
process for a given problem obeys not only the quantum physical laws but 
also is compatible with the used mathematical principles and its computa- 
tional complexity not only is dependent on the quantum dynamical process 
but also on the used mathematical principles. One large advantage to use 
the reversible mathematical-logic operations in solving some mathematical 
problems is that one could easily trace the unitary evolution pathways for 
some quantum states in the Hilbert space of the quantum system under the 
action of the logic operations. 

The discrete logarithmic problem is an important problem in classical 
public secure key cryptography [21] . It can be stated that given an integer b — 
a* > 0, how to calculate the discrete logarithmic function s — (log„6) modp, 
which is also called the index of the discrete logarithm, where the positive 
integer a is a given logarithmic base and p a known prime. In the classical 
computation it is hard to calculate the logarithmic function of a large integer 
b. This is the basis for the classical public key cryptographic systems based 
on the discrete logarithm [21]. It has been shown [22, 25, 30] that the discrete 
logarithmic problem can be solved in polynomial time in quantum computa- 
tion. Shor first gave an efficient quantum algorithm to calculate the index of 



20 



the discrete logarithm [22]. Later this quantum algorithm was improved in a 
determination form [30a] with the help of the amplitude amplification method 
[6]. Here, with the help of these quantum algorithms [6, 22, 25, 30a] an ef- 
ficient unitary sequence is constructed to generate the index state \s) of the 
discrete logarithm from the modular exponentiation state modp). By this 
efficient unitary sequence any quantum state \g^ modp) of the multiplicative 
cyclic group state space S{Cp^i) can be efficiently converted into the corre- 
sponding index state \s) of the additive cyclic group state space S{Zp^i). In 
constructing this efficient unitary sequence many efficient mathematical-logic 
operations have been employed extensively, such as the modular exponen- 
tiation operation, the modular multiplication operation, and the quantum 
Fourier transform and so on, and some mathematical knowledge of num- 
ber theory are also used necessarily. Because the index s and the modu- 
lar exponential function /(s) = g'^raodp have a one-to-one correspondence, 
there exists a unitary operator Uiog{g) such that [/iog(5')|5'*modp) = \s) and 
U^g{g)\s) = \g^modp), here g is the logarithmic base and also a primitive 
root (modp) or a generator of the multiplicative cyclic group Cp_i. Note that 
here there is not any extra auxiliary register to be used by the unitary oper- 
ator ^7iog(5'). Generally, such a discrete logarithmic unitary operator U\og{g) 
is hard to be constructed. However, with the help of the reversible com- 
putational techniques [22, 23, 24, 26, 27] an alternative construction to the 
discrete logarithmic unitary operator Uiog{g) could be achieved conveniently 
by using many extra auxiliary registers. The construction can be divided 
into two steps [23, 24, 27]. One step is to construct by using two registers 
the modular exponentiation unitary operation: V/|s)|0) = \s)\g'^ modp) . It 
is well known that the modular exponentiation unitary operation can be ef- 
ficiently built up in the reversible computation [21, 22, 23, 24]. Another 
is to construct the unitary operation of inversion function of the modular 
exponential function: V/-i |gf* modp) |0) = \g^ mod p)\s), here also by using 
two registers. Then the discrete logarithmic unitary operation Uiog{g) may 
be expressed equivalently by U\og{g) — V^SVf-i, where the SWAP unitary 
operation S is defined by S\s)\g^ modp) = |(?* modp)|s). This is due to the 
fact that there holds f/iog(^)|^'modp)|0) = SVf-i\g' modp)\0) = |s)|0), 
which further indicates that by omitting the auxiliary register with the state 
|0) the unitary operation sequence V^SVf-i is really the discrete logarithmic 
unitary operation Uiog{g). In effect the unitary operation sequence V^SVf-i 
is equivalent to the unitary operator U\og{g) of the discrete logarithm, but it 
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must be careful when the unitary operation sequence is performed in a quan- 
tum system since the unitary sequence requires the auxihary registers of the 
quantum system be in the specific state |0) before and after the operation, 
while the quantum system may be in any state. Though the modular expo- 
nentiation unitary operation Vf can be built up efficiently [22, 23, 24], it is 
generally hard to build up the unitary operation Vf-i of the inversion function 
of the modular exponential function. It is this unitary operation Vj-i that 
makes it hard to construct the discrete logarithmic unitary operation U\og{g). 
A functional unitary operation may exist but its inversion-functional unitary 
operation could or could not, which usually is dependent on the mathematical 
property of the function. Obviously, some mathematical functions have their 
own unique inversion functions but some do not have in some given func- 
tional or variable value ranges. If the functions do not have their own unique 
inversion functions in some given value ranges, then the unitary operations 
for the inversion functions usually could not exist uniquely in these value 
ranges although the functions may have their own unitary operations. When 
both a function and its inversion function exist in a given value range, they 
usually have their own unitary operations, respectively, and sometime their 
unitary operations are the same up to the conjugate relation. But in general 
a functional and its inversion-functional unitary operations can be different 
completely. As the modular exponential function f{s) — g^^modp and its 
index variable s have a one-to-one correspondence, this makes the modular 
exponential function /(s) and its inversion function, i.e., the discrete loga- 
rithmic function or the index variable s, have their own unitary operations. 
Because the unitary operation V/ can be built up efficiently the discrete log- 
arithmic unitary sequence U\o^{g) — V^SVf-i is mainly dependent on the 
unitary operation Vf-i in computational complexity. Below it is devoted to 
the construction for the efficient unitary operation Vf-i of inversion function 
of the modular exponential function. Before building up the unitary oper- 
ation Vf-i several conventional reversible mathematical-logic operations are 
introduced. 

{i) The modular addition operation ADDL{a, P). The modular addition 
operation is defined as 

ADDL(l,2)\x)\y) = \x)\x + ymodL), x,y e Zl- 

Here the integer set Zl — {0, 1, L — 1}. The indices a and P denote the 
registers that are acted on by the modular addition operation ADDL{a,f3). 
The modular addition operation ADDl{1,2) is performed by adding the 
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integer x of the first register to the second register and taking modulus L. 
It can be implemented in polynomial time ~ O(logL) [22]. The modular 
addition operation ADDl{1^2) is a reversible operation since the integer y 
can be derived uniquely from x and {x + y) modL if < a;, |/ < L — 1. As 
a specific modular addition unitary operation the COPY unitary operation 
COPY {a, P) is defined as 

COPY{l,2)\x)\0) = \x)\x), X e Zl. 

The inverse COPY unitary operation [COPY{a, P)]^ is really the subtrac- 
tion unitary operation: [COPY{l, 2)] + |x)|a;) = |a:;)|0), x e Zl. 

(ii) The modular multiplication unitary operation ML{a, (3,^) is defined 

as 

MLil,2,3)\x)\y)\0) = \x)\y)\xymodL), x,y E Zn 

where x^y are integer variables, the integer L is modulus and the integer 
N may be different from L. The indices a and j3 denote the two registers 
whose integer variables x and y are multiplied to one another and the index 
7 marks the third register that loads the multiplication operation result. As 
an example, the modular multiplication unitary operation is applied on the 
cyclic group state: 

Mp(l, 2, 3) li?^ modp) I c/^ modp) |0) 
= |g'^modp)|gi^modp)|gi^'''^modp), a;,yeZp_i. 

{Hi) The modular exponentiation unitary operation. First consider the 
modular multiplication operation Ua,N{oi) which is defined as 

Ua,N{'^)\x) = IxamodA^), {a,N) = 1, x e Z^. 

This operation is unitary only when the integer a is coprime to the integer 
[17, 31], i.e., {a,N) = 1. This unitary operation need not any additional 
auxiliary register in principle. But when the unitary operation is constructed 
by the mathematical-logic operations it still needs many extra auxiliary reg- 
isters. The index a denotes the register acted on by the operation Ua,N{ci:). 
Generally, the modular exponentiation operation may be taken as [C/o,jv(q;)]' 
for any positive integer /. The conditional modular exponentiation opera- 
tion U^L{a,P) may be defined with the help of the modular multiplication 
operation Ua^L^P) : 

— [x)[ya^modL), x e Zjv, y G Z^. 
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This conditional modular exponentiation operation is unitary only if the inte- 
ger a is coprime to the integer L. However, using one more auxiliary register 
a general conditional modular exponentiation operation, which is unitary 
even if the integer a is not coprime to the integer L, may be constructed by 

C/:,i(l,2,3)|a;)|y)|0) = \x)\y)\ya- v^odL),x,y e Z^. 

In particular, the two- variable conditional modular exponentiation operation 
Uf — C/„^^(l,2,3) have been used extensively in the discrete logarithmic 
problem [22, 25, 30]: Ul,Jl,2,3)\x)\y)\0) = \x) \y)\b- ay mod L), x,y G Z^, 
where a and b are constant integers and usually N > L. These modular mul- 
tiplication and modular exponentiation unitary operations may be built up 
efficiently by the basic reversible logic operations [21-27] and generally can 
be efficiently implemented in polynomial time ~ 0(log^ N) and ~ 0(log^ N), 
respectively [22]. The qubit number used to implement these modular expo- 
nentiation operations generally is ~ O(logA^) [21, 22, 23, 24]. 

Besides these conventional mathematical-logic unitary operations intro- 
duced above mathematically or quantum physically many important unitary 
operators, unitary operations, elementary propagators, or quantum gates also 
can be employed in construction of a unitary sequence. A large advantage for 
the type of unitary operations is that the unitary operations usually are non- 
selective unitary operators and hence need not any auxiliary qubits. But the 
artificial conditional unitary operations, which also can be thought of as the 
selective unitary operations, may need few auxiliary qubits to help achieving 
the specific conditional operations. 

(iv) The SWAP unitary operation and other elementary quantum gates 
[32]. The SWAP{a, (3) unitary operation is defined as 

SWAP{l,2)\x)\y) ^ \y)\x),x,y e Zr,. 

{v) The quantum Fourier transforms in the Hilbert space. The conven- 
tional quantum Fourier transform [22, 33, 34] usually is defined in the regular 
Hilbert space {]Zjv)}, 

10 —= V exp[i27rM/A^]|A;), I e Z^. (5) 

For the integer N — 2^ the quantum circuit Qnft for the quantum Fourier 
transform is very simple and consists of ~ 0{p?) basic quantum gates. Note 
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that there is not any auxihary qubit in construction of the quantum circuit 
(32"FT- For the case that the integer N is not a power of two the quantum 
circuit Qnft also can be constructed with ~ 0(log N) basic quantum gates 
or even less [30, 31, 34, 35], but many auxiliary qubits are needed in the 
construction of the quantum circuit. 

(vi) The functional quantum Fourier transform. The functional quantum 
Fourier transform is really the quantum Fourier transform applying to a 
non-regulation state subspace of the Hilbert space. Because the functional 
quantum Fourier transform is related closely to the unitary operation of 
the inversion function of a function it could not be generally constructed 
efficiently for any function. Suppose that the function f{x) is a periodic 
function: f{x) = f{x + r), here r is the period of the function. Then the 
functional quantum Fourier transform Qrft for the periodic function f[x) 
may be defined as [36] 

1 

Qrft\f{l)) = -/=Y. exp[z27rA;//r]|/(A;)), A;, / G Z,. (6) 

k=0 

It can be shown that the functional quantum Fourier transform Qrft can be 
constructed efficiently if both the unitary operations for the periodic function 
f{x) and its inversion function f{x)~^ in the variable value range Zr can be 
built up efficiently. Suppose that the functional and its inversion-functional 
unitary operations are defined by V/|a;)|0) = \x)\f{x)) and Vf-i\f{x))\0) = 
for x G Zr, respectively. Then the unitary sequence for the invert- 
ible periodic function f{x) is Uf = V^_iSVf which satisfies Uf\x) = 
for X & Zr, here any auxiliary qubits are dropped and S is the SWAP op- 
eration. Using the invertible-function unitary sequence Uf the functional 
quantum Fourier transform Qrft is related to the conventional r— base quan- 
tum Fourier transform QrPT by 

Qrft — UfQrFrU'f . 

Thus, the quantum circuit for the functional quantum Fourier transform Qrft 
can be efficiently constructed if there is an efficient quantum circuit for the 
unitary operation Uf oi the invertible function f{x). 

(vii) The group operations of a cyclic group. A cyclic group G can be 
generated by a generator g, G = (g) = {E, g, g'^, .... g^'^''^^}. If the genera- 
tor g is a. unitary operator which is denoted as Ug here, then all the group 
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elements of the cyclic group G are also unitary operators. When the uni- 
tary cyclic group operation Ug is applied to a cyclic group state the unitary 
transformation is given by 

Ug\g^ mod p) = \g^^^modp). 

The unitary operation of the cyclic group may be built up efficiently with the 
help of the diagonal and anti-diagonal unitary operators [16]. Actually, just 
like the modular multiplication unitary operation Ua,L{oi) the cyclic group 
operation Ug could also be constructed efficiently by using the basic reversible 
logic operations [26, 27], but this construction needs many extra auxiliary 
qubits. The cyclic group operation Ug can also be performed in a conditional 
form 

Ug\a)\g'' modp) = |a)|fii^+"modp). 

With the help of these efficient unitary operations mentioned above an 
efficient unitary sequence will be built up below, by which the index state |s) 
of the discrete logarithm can be generated from the modular exponentiation 

state Ig'^modp). 

The oracle unitary operation in the discrete logarithmic problem is the 
usual conditional modular exponentiation operation Uj = [/^^^(a, /3, 7) : 

C//|a;)||/)|6)|^)|0) = \x)\y)\b)\g)\f{x,y)), x,y e Zj,. 

The double- variable modular exponential function f{x,y) is defined by 

f{x,y) = b^g^modp 

where the integer b = g'^modp > with the index s G Zp^i. The Fermat 
little theorem (the Theorem 71 in Rcf. [19]) shows that there holds a^~^ = 
1 modp for a prime p and any integer a that is not divided by the prime p. 
In particular, for the integer a = g, b, or even g^modp with z = sx + y for 
any integers x and y there also holds a^~^ = Imodp since g is a primitive 
root (modp). Thus, the modular exponential function f(x,y) is a periodic 
function with the period p — 1 by the Fermat little theorem. Since the 
periodic function f{x.y) satisfies f{x,y) = f\{sx + y) = g'^^^^ raodp, f\{z) = 
fi{z + {p — 1)) and also f{x,y) = f{x + l,y — Is) for any integer / [25] the 
Fourier transform of the functional state \f{x,y)) therefore takes the form 

\f{h,l2)) = \f{l2smod{p-l),l2))S{{ks-h)mod{p-l)) 
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= S{{l2S-h)mod{p-l)) 

p-2 p-2 

X— ^ exp[t27rk{sx + y)/{p-l)]\f{x,y)). (7) 

P X=Oy=0 

The indices li and I2 in the Fourier transform state {/{h-h)) must satisfy 
the relation {I2S — li) = mod(p — 1) for li, I2 = 0, 1, ...,p — 2 due to the fact 
that f{x,y) = f{x + l,y — Is). In terms of the Fourier transform states (7) 
the functional state \f{x,y)) is expressed as 

\f{x,y)) = — ^ Yl exp[-t2nl{sx + y)/{p-l)]\f{ls,l)). (8) 

If one looks the function f{x,y) as the single- variable periodic function 
fi{z) — g^modip with the variable 2; = + y = 0, 1, ...,p — 2, fi{z) — 
fi{z + p — l)^ then one can express the functional state \f{x, y)) — \fi{z)) in 
terms of its Fourier transform states {|/i(0)}) 

1 ^"^ 

\h{z)) = -== J2 expH27ri^/(p - l)]|/i(0). 

By comparing it with equation (8) one can see that there holds the state 
identity |/(/s, /))/ y/p — 1 = for / = 0, — 2 and equation (7) is 

indeed the Fourier transform of the functional state \fi{z)) (its explanation 
can be seen later) . 

The functional Fourier transform states (7) and the functional states (8) 
will be used below in building up the unitary operation Vf-i of the inversion 
function of the modular exponential function. There are many auxiliary 
registers to be used in the construction of the unitary operation Vf-i. The 
starting state in the construction may be taken as |^o) = |R-0) modp). 
Here |R0) = |0)|0)...|0) stands for the hbrary of auxihary registers with 
the initial state |0) and suppose that the register library stores sufficiently 
many registers to supply to the coming quantum computation. The starting 
state is first converted into the superposition by applying the conventional 
{p — 1)— base quantum Fourier transforms (5(p-i)ft to the first two registers, 
respectively, which are supplied by the register library |R0). Then the oracle 
unitary operation Uf of the discrete logarithm is applied to the first three 
registers, here the oracle unitary operation Uf uses the data g and b — 
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g^modp. After the oracle unitary operation Uf the state of the quantum 
system is in the state 



|*o> = |RO)(g)|/modp) = |RO)(g)|0)|0)|y^modp) 
'^^^^^^ |RO)(g)-l^ f g \x)\y)\g^modp) 

^ x=Qy=0 
U 1 

4 l^i) = |RO)(g)— ^ |a;)|2/)|/(a;,|/))|/modp). 



P x=Q y=Q 

The oracle unitary operation Uf oi the discrete logarithm is performed in 

the conventional manner that the integers g and b = g^modp are first stored 
in auxiliary registers, the quantum computer reads the integers g and b and 
values of the variables x and y in the first two registers, then performs the 
functional operation f{x,y) = b^g^modp and puts the computing result in 
the third register which is provided by the register library |R0). Note that 
the data b is already in the third register before the oracle unitary operation 
Uf and in the fourth register after the oracle unitary operation, while the 
known data g can be stored in a temporary register beforehand and after 
the operation Uf it can be removed from the register. Using the functional 
Fourier transform states (7) to express the functional state \f{x,y)) one ob- 
tains, by inserting equation (8) into the state 

p-2 . p-2 

= |RO)(g)— ^ J]{[^==^expH27rW(p-l)]|a:)] 

^ 1=0 x=0 

P-2 



L= expH27rV(p- l)]|y)]|/(Zs,0)|y^modp)}. 



^ -.=0 

Now the conventional (p— 1)— base quantum Fourier transforms Q(p-i)FT are 
applied again to the first two registers in the state l^'i), respectively, then 
the quantum system is in the created state |^2) after the SWAP unitary 
operation. 



|Ro)(g)^ 1^ \lsmod(p-l))\l)\f(ls,l))\g^modp) 

^ 1=0 

'^"^ 1*2) = |R0) (g) ^ 5^ ms mod(p - l))\f{ls, I)) 1/ modp) . 



^ 1=0 
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The state 1^2) contains the information of the index s in the last three 
registers. It is expected to extract the index s from the second register as 
the quantum states in other two registers are more comphcated. Therefore, 
the problem to be solved is how to extract the index s from the state of the 
second register in the state |^'2) and this is related to the construction of the 
unitary transformation Ug : 

r 

|*2> ^ |R0) (g) ^ 5] 10 niod(p - ms)\f{ls, I)) 1/ modp) , 

where the index I runs over only some specific values in the range < I < p—1 
and C is a normalization constant (see below). In the unitary transforma- 
tion f/^ the desired state transfer |/)|/smod(p— 1))|0) |Z)|/smod(p — l))|s) 
usually could not be achieved by the conventional inverse multiplication op- 
eration Mp_^{a, /3,^). This is because the function f{s) = lsmod{p — 1) 
does not have a one-to-one correspondence to its variable s for some integer 
values / in the range < / < p — 1. Actually, it is possible that the inver- 
sion function f{s)~^ 7^ s if the integer / is not coprime to p — 1. However, 
the inversion function f{s)~^ = s if the integer / is coprime to p — 1, i.e., 
— 1) = 1, and this is one of the two bases to achieve this unitary state 
transfer and obtain the real index state It can be seen that the state 1^2) 
consists of p — 1 orthogonal states with index I = 0,1, ...,p — 2. Among all the 
[p — 1) orthogonal states how many orthogonal states have an index integer 
/ coprime to The question can be answered by the Euler theorem in 

number theory (see the Theorem 72 in reference [19]). As known in number 
theory [19], number for the positive integers coprime to and not greater than 
p — 1 is 0(p — 1), where 0(p — 1) is the Euler totient function, and it is also 
known that the Euler totient function (f){p — 1) > 6{p — l)/loglog(p — 1) 
for some constant 6. More exactly, if the integer (p—1) has a prime fac- 
torization: p — 1 = pTpT ■■■Pr'' J where Pi,P2, ■■■,Pr are distinct primes, then 
(f){p — 1) = (p—1) n[=i(l ~ p7^)- This shows that among the p — 1 or- 
thogonal states of the state 1^2) there are 0(p — 1) orthogonal states that 
have an index integer / coprime to p — 1. Thus, the probability for all such 
orthogonal states in the state 1^2) is 4>{p — l)/(p — 1) > 5/loglog(p — 1). 
The probability is inversely proportional to loglog(p — 1) and hence is high 
even when the prime p is very large. This is another basis to obtain the 
real index state \s). If the index integer I is coprime to the integer (p — 1), 
there is a modular multiplication unitary operator Ui-i — Uj^(r,_i) such that 
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Ui-i\lsmod{p — 1)) = |smod(j9 — 1)). Indeed, the unitary operation Ui-i can 
generate the real index state \s) from the state |/smod(p— 1)). But the uni- 
tary operation Ui-i does depend on the integer /, then it is clear that for the 
case / 7^ /' the unitary operation Ui-i does not generate the index state \s) 
from the state |Z'smod(p — 1)), that is, Ui-i\l'smod{p—l)) ^ |smod(p— 1)) if 
V ^l. Since all the index integers I in the (p — 1) orthogonal states of the state 
|\E'2) are different it is impossible to use a single unitary operation f/^-i to 
generate the real index state |s) from these orthogonal states even if the index 
integer / for each of these states is coprime to (p — 1). In order to generate the 
real index state |s) from the state |^2) the unitary transformation Ug should 
be independent of any index integer I. The conventional Euclidean algorithm 
[19] could be used to construct the unitary transformation Us- Suppose that 
the greatest common divisor for the two integers I and (p — 1) is rf^, i.e., 
— 1) = di. The Euclidean algorithm can find efficiently two integers ai 
and hi such that the greatest common divisor di — — 1) = a^Z + — 1). 
Then ail — d/mod(p — 1). If = 1 then ail = lmod(p — 1) and hence ai 
is the inverse element of the integer / (mod(p — 1)). Using the Euclidean 
algorithm the following unitary transformations can be obtained, 

|/)|0)|/smod(p- 1))|0) |/)|ai)|/smod(p- 1))|0) 
^ |/) |a;) |/s mod(p — l))\ailsmod{p — 1)) 



= |/) |a;) |/s mod(p — l))\dis mod(p — 1)) 

^^^^^ \l)\0)\ls mod(p - l))\dis mod(p - 1)) 

_ r |/)|0)|/smod(p- l))|s), ifc^, = l. 

~\ \l)\0)\lsmod{p-l))\dismod{p-l)), ii di > 1. 

Here the Euclidean algorithm GCD must be performed in a quantum par- 
allel form. This unitary transformation could be used to build up efficiently 

the unitary transformation Us as the classical Euclidean algorithm can be 
implemented in polynomial time ~ O(log^p). A quantum- version extended 
Euclidean algorithm was given in Ref. [30b]. Another algorithm that may 
be used to build up the unitary transformation Ug is based on the Euler 
theorem in number theory [19]. The Euler theorem (the Theorem 72 in Ref- 
erence [19]) states that if (a, m) = 1, then a'^('") = 1 mod m. Thus, there holds 
l(j>{p-i) — I niod(p — 1) for any integer / coprime to (p — 1), i.e., {l,p — 1) = 1. 
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But if 1) 7^ 1, the identity — 1 mod(p— 1) generally does not hold. 

Since the computation for the modular exponentiation I't'^P^^) mod(p — 1) is 
simpler and efficient, it could be more convenient to use the modular expo- 
nentiation operation to build up the unitary transformation Us- When the 
state |\1'2) is acted on by the conditional modular exponentiation unitary 
operation it will be converted into the state l^'s), 

1*2) ""^'-^-^--^ 1*3) = |R0) (8)^2 \ms^od{p - 1)) 

(g) |Z^(f-i)smod(p - l))\J{ls, l))\g'uvodp) 

where the modular exponential function mod(p — 1) is first com- 

puted by the conditional modular exponentiation operation U^(^p_^-^_^ in 
a quantum parallel form by using the integer I in the first register and then 
is put in a temporary register, then the function /<^(p~i)~i mod(p— 1) and the 
function /smod(j9 — 1) in the second register are multiplied with one another 
and the result is put in the third register, and after these operations those 
states in the temporary registers are removed unitarily. The state |\E'3) is 
written as j^a) = |^3s) + |^3s') and the two orthogonal states \^zs) and 
\^^s') are given respectively by 

1 

1*3.) = |RO)(g)— ^ IOI^«niod(p-l)) 

0|s)|/(/s,/))|/modp), 
1 

i*3s' )= iRo)(g)— ^ ms^odip-i)) 

^\s'mis,l))\g'modp), 

where the sum with symbol — 1) = 1 means that the index I takes 
those integers less than and coprime to the integer (p — 1) and the sum with 
— 1) > 1 for the index I runs over those integers less than and not coprime 
to the integer (p — 1), the index s' — 1'^^'^'^^ s m.od{p — 1) for {l,p — 1) > 1 
(this also includes / = 0) and the index s — Z'^^^^-'^^s mod(p — 1) by the 
Euler theorem that /"^(p"^) = 1 mod(p — 1) if / is coprime to p — 1. Generally, 
the index s' ^ s. It is known that the computational complexity for the 
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modular exponentiation operation is ~ O(log^p) and hence the conditional 
modular exponentiation unitary operation p_i may be implemented 

in polynomial time ~ O(log^p). Now there are the desired state l^&ss) which 
contains the real index state \s) and the undesired state l^'ss') which does 
not have the index state \s) in the state l^a). Obviously, the probability for 
the desired state |^3s) in the state is 0(p — — 1) and hence the 

probability for the real index state |s) in the state |\E'3) is 0(p — l)/(p — 1) > 
6/ loglog(p— 1). It is necessary to remove unitarily the undesired state |\E'3s') 
from the state 1^3) or to convert it into the desired state {"^ss) by a unitary 
transformation so that the real index state \s) can be obtained from the 
desired state |^3s) in a high probability (~ 1). 

Here gives a simple method to convert unitarily the whole state |\l/3) into 
the desired state |^3s). This method is similar to the amplitude amplification 
method [6, 30a]. It uses simply two unitary operations, one is the inversion 
operation for the desired state 1*1^33), 

C/(|*3,))=exp{-i7r(|*3.)(*3.|)} 
and another is simply taken as 

U{\^s)) = exp{-^7r(|v[/3)(il/3|)} 

= exp{-i7r(|*3.) + |*3s'))((*3s| + (*3s'|)}- 

Firstly, the inversion for the state |^3s) can be achieved efficiently. Because g 
is a primitive root (modp), it has the inverse element = g^~^modp such 
that g^^g = 1 mod p. Then by making the conditional cyclic group operation 
Ug-i one obtains the following state transformation: 

[/;-i|s')|/modp)|0) = \s')\g'modp)\g-''+'modp),s,s' e Vi- 

Here the operation result is put in the last register. Therefore, there holds 
the unitary transformation: 



UU\s')\g'^odp)\0) 



\s)\g''^ mod p)\l) , if s' = s 
|s')|gf*modp)|gi~*'"'"*modp), if s' 7^ s 



Because the state |1) is orthogonal to these states modp) for any 

indices s' 7^ s, one can make the selective inversion operation Ci(7r) = 
exp(— zttDi) to invert the state while leaving these states l^f"* modp) 
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with s' ^ s unchanged. If now the conditional cychc group operation U^-i 
acts on the state I^Ps), then only the desired state |\E'3s) generates the state 
|1) because it contains the index state |s), while the state |^3s') produces 
the states l^i"* """^ modp) with s' ^ s. After the unitary operation ?7^_i the 
selective inversion operation C\{t:) is applied to the register whose state is 
either |1) or l^f"^ modp), then only the state C/^.il^^as) is inverted, while 
the state f/^-i I^E'ss') keeps unchanged. After the selective inversion operation 
Ci(7r) the states f/^-i|^3s) and f/^_i l^'a^/) are returned to the states |^3s) 
and l^'ss'), respectively, by applying the inverse unitary operation (?7^_i)+. 
The inversion for the state |\&3s) therefore is achieved, while the state \^2,s') 
keeps unchanged. Another unitary operation U{\^^)) is generated from the 
oracle unitary operation: UosiO) = exp{— i^^(|R0)|(7*modp)((y'*modp|(R0|)} 
with ^ = TT. It is shown above that the state |R0) [(j'* modp) can be efficiently 
converted into the state |\1'3) = |^3s) + |^3s') by a sequence of unitary opera- 
tions which may be simply denoted as t/^d^'s)). Then |R0) Igi'' modp) ^^l!^-^^'' 
|^'3) and the unitary operation U{\^^)) can be expressed as U{\^^)) = 
UT{\^i))Uos{'^)U^{\^z))- The unitary operation sequence that converts the 
state l^^a) into the desired state \^zs) then is given simply by 

R{m) = [uim)ci\^3s))r, 

where the iterative number m takes ~ 0(>/loglog(p — 1)) so that the state 
l^^s) is converted in a high probability (~ 1) into the desired state l^t'ss), 
this is because the probability for the desired state l^'ss) in the state l^'a) 
is (f){p — — 1) > 5/loglog(p — 1). Thus, under the unitary operation 

sequence R{m) the state j^'a) is converted completely into the desired state 

1*3.), 

1*3) ''-^V3.) = |RO)(g)-^ IOI^«niod(p-l)) 
(^\s)\f{ls,l))\g'modp), 

where C is a normalization constant, C = y/ {p — l)/(j){p — 1). Now all 
the orthogonal states in the state \^3s) have the index state \s). The state 
|Zsmod(p — 1)) in the second register in the state \^3s) can be removed 
unitarily by making an inverse multiplication operation M^^(l,3,2) on the 
state |^3s). After the index state \s) in the third register in the state |^3s) 
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is moved to the last register, in which the index state |s) will be kept to the 
end, the state |^3s) is changed to the state |^4s) : 

1*3.) "'-ll'*^'-'^.- I*,) 



IRO) 



Yl IOI/(^«,0)l/niodp)|s). 

p — 1 ^-^ 



By inserting the inverse Fourier transform state \ f{ls,l)) (7) the state |^4s) 
can be rewritten as 



1*4.) = IRO)®^^ exp[^27r/(5a;i + a;2)/(p-l)] 

^ ^ Xl=0X2=0{l,p-l)=l 

x\l)\f(xi,X2))\g'modp)\s). 



Since the functional state |/(a;i,,T2)) = \g'^^^~^^^ modp) = |/i(sa;i +0:2)), there 
are only p — 1 functional states 0:2)) to be independent. However, there 

are (p — 1) x (p — 1) functional states ^2)) in the state \^4s), then not 

all these (p — 1) x (p — 1) functional states are independent. Actually, the 
state |*4s) can be reduced to the simple form |*5s) : 

^ p-2 p-2 



1*5.) = |RO)0^E E exp[i27ri^/(p-l)] 

^ z=0{l,p-l)=l 

x|0|/i(^))|/modp)|5). 



Why can the state 1*45) be written as the simple form |*5s)? There are totally 
(p — 1) X (p— 1) different index pairs (xi, X2) in the state 1*4.) since the indices 
xi, X2 = 0, 1, ...,p — 2. Now for each given z = {sxi + X2) mod(p — 1) for z — 
0, 1, ...,p — 2 there are (p — 1) different index pairs {xi,X2) to satisfy the same 
equation z — {sxi + X2) mod(p — 1) , while for all these (p — 1) pairs of indices 
{xi,X2) the functional states \ f{xi,X2)) take the same one: \fi{z)) and the 
phase factor exp[i27r/(sa;i+a;2) /(p— 1)] also are the same as exp[i27r/2;/ (p— 1)]. 
These (p — 1) different index pairs {xi,X2) that fulfill the same equation: 
z — {sxi + X2) mod(p — 1) may be taken as {xi, {z — sxi) mod(p — 1)) for 
xi — 0, 1, ...,p — 2. Thus, taking xi — 0, 1, ...,p — 2 and z — 0,1, ...,p — 2 
generates just all possible (p — 1) x (p— 1) different index pairs {xi, X2). Then 
in the state |*4s) the sums over the indices Xi and X2 may be carried out 
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in such a way that the sum for the index xi is first to run over the {p — 1) 
different index pairs (xi, {z — sxi) mod(p — 1)) for Xi = 0, 1, — 2 and 
for any given z = {sxi + X2) mod(p — 1), this sum wiU generate a factor of 
{p — 1) as the same functional states |/(a;i,a;2)) and the same phase factors 
exjp[i27rl{sxi + X2) / {p — 1)] in the state |^E'4s) are taken for these (p — 1) index 
pairs, then the sum for the index z is carried out for ^ = 0, 1, — 2, and 
hence the state |\l/4s) can be written as the simple state I^E'ss). Now one can 
also understand why the Fourier transform state — I)) / \/p — 1 

for / = 0, 1, — 2 (see before). 

Now observe the state and a series of unitary transformations: 

p-2 p-2 

= |R0) (g) — ^ J] J] exp[i27rZz/(p - 1)] 

^ z=0 1=0 



x|0|/i(^))|/modp)|s) 
1 



"^'^-''"^ |RO)(g)-^=L= ^ \z)\g^modp)\g^modp)\s) 

z=0 



^""h^ |R0)(g)^=5]|^)|/modp)|.) 



z=0 

?J)-1)FT 



|RO)(g)|/modp)|s). 

It can be seen that by making the inverse Fourier transform, the inverse mod- 
ular exponentiation operation (Ugj^)'^, and again the inverse Fourier trans- 
form the state \^'^g) is changed to the state |R0) modp) |s). 

However, the state l^'ss) is different from the state l^'s^) in that the sum 
for the index I in the state I^^qs) I'uns over only those integers that are less 
than and coprime to the integer (p — 1). By making the inverse Fourier 
transform on the state \l) in the first register the state |^5s) is changed to 
the state |^6s)) 

1*6.) = |RO)(g)^ EE h{z,z')\z')\h{z))\g^modp)\s). 

^ z=Oz'=0 

The trigonometrical sum h{z,z') is given by 

1 

= exp[i27rZ(z-z')/(p-l)] 



(i,p-l) = l 
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where the sum for the index / runs over only those integers less than and 
coprime to the integer {p — 1). Obviously, the trigonometrical sum h{z, z) = 
iy0(p^^Ty if the index z' = z, for the number of the integers less than and 
coprime to the integer (p— 1) is 1). Then the state l^'es) can be rewritten 
as the sum of the two terms: 

1*6.) = |RO)0^/^^^^ |j \z)\g^modp)\g^modp)\s) 

P z=0 
1 

+ |R0) — ^ Y ^(^' 1^') "^""^P) modp) 

z^z' ,z,z'=0 

By making the inverse modular exponentiation operation {Ugp)^ on the first 
two registers the state |*6s) is transferred to the state |*7s) : 

\^,s) = |RO)(g)^^^?^^^ J]|^)|l)|^^modp)|s) 

P z=0 
1 

+ |R0) (g) — ^ J2 ^(^^ k') \9'~'' modp) 1/ modp) |s) . 

P Zytz',z,z'=0 

Since the index z' ^ z, the state |5'^~^'modp) 7^ |1) and hence the two 
terms in the state I^E'ts) are orthogonal to one another. Evidently, the first 
term in the state |*7s) has a total probability (j){p — — 1) which is 

greater than S/ \og\og{p — 1) for some constant S. Again using the amplitude 
amplification method the second term in the state |*7s) can be converted into 
the first term in a high probability (~ 1) and the iterative number in the 
amplitude amplification process to achieve this complete state conversion 
needs ~ 0(-\/loglog(p — 1)). This time the selective inversion operation is 
applied to the state |1) in the second register in the state |*7s) and another 
unitary operation for the amplitude amplification process is just the unitary 
operator exp{— i7r(|^'75)(^'7s|)} which can be also built up efficiently because 
the state \^7s) itself can be generated efficiently from the initial state |\E'o), 
as shown in the state-transfer process above. After the state |*7s) is changed 
to its first term completely, an inverse Fourier transform on the state 1^;) in 
the first register and the state transfer : |1) ^ |0) in the second register 
change the first term to the desired state ultimately, 

1 "'^ 

\^rs) ^ \R0)(^^==J2\z)\l)\g'modp)\s) 
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-(.-i).Ti^ |K0)(g)|<7* modp)|5). 

Obviously, the whole unitary transformation process above really performs 
a unitary transformation that firstly converts the starting state |\l/o) = 
\R0) <S>\9'^ ^o^p)\^) to the state l^'s), then to the state l^'ys), and finally 
to the desired state |R0) \g'^ mod p)\s). Evidently, this is an efficient uni- 
tary transformation process. This unitary operation sequence is just the 
unitary operation Vf-i of the inversion function of the modular exponential 
function f{s) = g^modp if the register library |R0) is dropped. Once the 
inversion-functional unitary operation Vj-i is obtained the unitary operation 
Uiog{g) of the discrete logarithmic function s = loggf{s) can be set up by 

If the starting state is a superposition, |\E'o) = X]s<^s|f^O) 'S) Id'^^odp), 
then it is required that the unitary operator f/(|^o)) = 6xp{— i^(|\I'o) (^E'ol)} 
be efficiently constructed so that the unitary operation [/(l^a)), etc., can 
be efficiently built up with the unitary operator ?7(|\I'o)). In this case the 
superposition |^o) ca-n be efficiently converted into the superposition = 

CKslRO) l^f* modp) |.s). For the quantum discrete logarithmic problem 
the integer b = g^modp is given beforehand and hence the oracle unitary 
operation Uos{0) = exp[— ^^^/^^((jf)] can be constructed efficiently in advance. 
Note that here the data h is used to prepare the unitary operation instead 
of a quantum state. Then using the above unitary operation sequence V/-i 
the initial known state |^o) = |R0) \g^vaodp) can be efficiently converted 
into the state |R0) ^ \g^ m.odp)\s) . Furthermore, by using directly the dis- 
crete logarithmic unitary operation U\og{g) the initial known state |^o) can 
be efficiently transferred to the index state |R0) \s) and a quantum mea- 
surement on the index state will output directly the complete information of 
the index s of the integer b — g^ mod p. 

4. The efficient state transformations among ttie cyclic group 
state subspaces 

Once it is obtained the unitary operation Uiog{g) of the discrete loga- 
rithmic function x — \ogg f{x) with f{x) — g^ modp, one may further use 
it to prepare some useful auxiliary oracle unitary operations Uos'{d) where 
the index s' ^ s generally and the index s is of the oracle unitary operation 
Uos{&) = Q^]i[—iODs{g)]. The process to generate the auxiliary oracle unitary 
operation Uos' {0) with index s' — js from the basic oracle unitary operation 
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Uos{0) is related to the state unitary transformation Vjs- 

<^\g' m.odp) ^ |R0)(g)|5^'"modp). 

In the classical irreversible computation the modular exponential function 
g^^modp can be efficiently computed for any given integers j and h = 
g'^modp [21], but it may not be so easy in the quantum search problem 
to generate unitarily the state \g^^modp) from the state \g^modp) for any 
given integer j. If the integer j is coprime to the integer (p—l), then there is 
an efficient unitary transformation such that f/jp_i(a)|s) = \jsmod{p — 1)) 
and the unitary transformation Vjg therefore can be achieved efficiently with 
the help of the unitary operation Uiog{g) of the discrete logarithm. Hence the 
auxiliary oracle unitary operation Uojs{0) can be efficiently generated from 
the oracle unitary operation UosiO). However, in order to simplify the quan- 
tum search problem in the cyclic group state space one had better convert 
the marked state into a small subspace of the cyclic group state space. Then 
the auxiliary oracle unitary operation Uojs{0) usually is specific one and the 
integer j takes only some specific positive integer values that are usually not 
coprime to the integer (p — 1). How can such an auxiliary oracle unitary 
operation Uojs{0) be constructed from the oracle unitary operation Uosid)! 

Evidently, the following unitary transformations can be achieved effi- 
ciently for any integer j: 

|R0) (g) l/modp) ""'^'^ |R0) (g) \s) ^ |R0) (g) \j)\s) 

''^-'-^'^''^\RO)0\j)\s)\jsmod{p-l)) 

where the unitary transformation Fj\0) = \j) for any known integer j can be 
built up efficiently. If the integer j is coprime to p—1, then a further unitary 
transformation sequence can be made: 



|RO)(^|j)|s)|jsmod(p-l))|0) 

|R0) (g) \j)\jsmod{p - l))\s) 



R0)Q9|j)|jsmod(p-l)) 
5 |R0) (g) |jsmod(p - 1)) ^'U'^ |R0) (g) l^^'^modp). 
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Therefore, the state unitary transformation Vjs can be achieved too by a more 
complicated way. However, from these detailed state unitary transformations 
one may see more clearly why the state unitary transformation Vjs is not easy 
to be constructed if the integer j is not coprime to the integer (p — 1). 

If the integer j is not coprime to the integer (p — 1), that is, {j,p — 
1) > 1, then situation becomes much more complicated. Firstly, the state 
transformation \j)\jsmod{p — 1))|0) \j)\jsmod{p — for any index 

s G Zp^i usually could not be unitary. This is related to the problem whether 
there exists a unique inversion function of the function f{x) = jxmod(p — 
1) or not for any index variable x e ^p-i- Since the function f{x) may 
not be a one-to-one function corresponding to its variable x e Zp_i if the 
integer j is not coprime to {p — 1), the inversion-functional operation f{x)~^ 
therefore may not be unitary in the variable value range: x G Zp^i. In the 
same argument the state transformation l^f-^'* modp)|0) — > {g^"^ mod p)\s) for 
any s G Zp^i usually could not be unitary if {j,p — 1) > 1, although the 
state transformation \g^^ modp)\0) \g^^ modp)\jsmod{p — 1)) is unitary. 
More generally, there could not be a single unitary transformation for any 
integer j G Zp_i such that \j)\js mod{p — 1))|0) \j)\jsmod{p — l))|s) for 
any given index s, as shown in section 3. These may be best understood 
with the knowledge of number theory [19]. Suppose that one is given a 
set of the integers j — and jsmod{p — 1) — bk for k — l,2,...,r to 
reproduce uniquely the index s. This problem is really equivalent to solving 
the congruence system: 

OfcX = 6femod(p - 1), A; = 1,2, ...,r, (9) 

where the integers {a^} may not be coprime to p — 1 and evidently x = s 
is a solution to the congruence system. First consider a single congruence, 
for example, the A;— th congruence: akxmod{p — 1) = bk- Denote that the 
greatest common divisor between and p — 1 is dk = {cik,P — 1)- Then the 
single A;— th congruence has exactly dk solutions [19, 20] as dk is a divisor of 
the integer bk = a^s mod(p— 1) (i.e. dk\bk) for k = 1,2, ...,r. If now the integer 
Gk is not coprime to the integer (p — 1), that is, dk > 1, then there are dk 
different index values s to satisfy the same k—th congruence, indicating that 
there is not a single unitary state transformation: \ak)\aksmod{p — 1))|0) — > 
\ak)\akSmod{p — l))|s) for any index s G Zp_i. 

Now consider the whole congruence system (9). Obviously, the congru- 
ence system is solvable. Note that dk divides the integers {p — 1), ak, and 
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bk- Denote the integer m^. = (p — l)/dk, = ctk/dk, and bk = bk/dk = 
Ofesmodrnfe. Then the Theorem 57 in reference [19] shows that the congru- 
ence system is equivalent to the simpler one: a^x = b^ modm^t, k = 1, 2, r. 
Since (dk,mk) = 1 there exists an inverse element hk of such that /ifeSfc = 
Imodmfc, the congruence system a^x = fe^modrnfe, k = 1,2, ...,r, then can 
be further reduced to the standard one: 

X = Ckraodruk, k = 1,2, ....,r, (10) 

where the coefficients Ck — hkbk- Now the Chinese remainder theorem [19, 
20] shows that if mi,m2, ■■■,mr are coprime in pair, i.e., {mi,mj) = 1 for 
1 i < j ^ r, then the standard congruence system (10) has a unique 
solution (modm), 

X — {niMiCi + n2M2C2 + ... + nrM^Cr) modm, (11) 

where m = mim2---m,f. = mi Mi = m2M2 = ... — rrirMr and the inverse 
element Uk of Mk (modmfc) satisfies UkMk — Imodm^ for k — l,2,...,r 
because (mfc, M^) — 1. Hence using the efficient Euclidean algorithm [19] 
the integer Uk is determined from the known integers Mk and m^ for k = 
1,2, ...,r. The solution x of equation (11) is really the index s if the index 
s is bounded on by < s < m because the solution x is unique (modm). 
However, the index s really belongs to the integer set Zp_i = {0,l,...,p — 2}. 
Then the solution x could not be the real index s if m < p — 1, for example, it 
could occur that s = x + m for 0<s<j9— 1. In order that the solution x of 
equation (11) is exactly the real index s the integer m should be equal to or 
greater than (p — 1). In fact, it is better to take the integer m exactly as the 
integer p — 1, that is, m = p — 1, as the situation is related closely to the prime 
factorization of the integer p— 1 and the structure of the cyclic group 5'(Cp_i) , 
as shown in section 2. Now consider this specific case that the integer m = 
(p — 1) and (p — 1) has the prime factorization: (p — 1) = Pi^p2^...p"'' (p^ are 
distinct primes). Take = (p — 1)/Pfc* = and bk = afcSmod(p — 1) = 
Mfcsmod(p - 1). Thus, 4 = (afc,p - 1) = Mk and ruk = {p - l)/4 = Pt ■ 
Then cik — 1 and bk — smodm^. Moreover, (p — 1) = mim2...mr = rriiMi, 
and {mi,mj) — 1, {mi,Mi) — 1, ior 1 < i < j < r. Clearly, hk — 1 and 
Ck — s mod mfc. Thus, the solution (11) is further reduced to the form 

X = (niMiCi + n2M2C2 + ... + n^M^c^) mod(p - 1). (12) 
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Now the solution x of equation (12) is just the real index s and the vector 
{cfe} is just the index vector {s^} in the equation (3) in section 2. Actually, in 
comparison with the equation (3) in section 2 one now sees that the equation 
(12) is just the equation (3), showing once again that this solution x is just 
the real index s. Therefore, the Chinese remainder theorem [19, 20] ensures 
that any index state |s) with < s < p — 1 can be exactly expressed as 

\s) = \{niMiSi + n2M2S2 + ■■■ + nrMj.Sr)m.od{p — 1)) 

= |(niMi +n2M2 + ... + nrM^)smod(p- 1)), (13) 

where the identity MkSk = M^s mod(p — 1) has been used for /c = 1, 2, r. 

The index state identity (13) could be helpful to prepare some specific 
auxiliary oracle unitary operations in the additive cyclic group state space 
S{Zp_i). Now it can be shown below that the index state \s) can be converted 
unitarily into a tension product of the r states {|s mod m^)} or {\MkS mod(p— 
1))} for k = 1,2, r in the r different registers. Firstly, by simply applying 
the reversible modular arithmetic operation MOD{mk) on the index state 
\s) one obtains 

|RO)(g)|s) |$o) = |RO)(g)|s)|smodmfc). 

The reversible modular arithmetic operation can be thought of as a specific 
reversible modular addition operation. Evidently, the state Ismodm^) G 
S{Zmf,) and here < smodm^ < rrik for k = 1,2, ...,r. Repeating the 
reversible modular arithmetic operation r times ior k — 1,2, ...,r one arrives 
at the state |$i) : 

|RO)(g)|s) ^ = |RO)(g)|s)(g)|smodmi) 

|smodm2) (^...(^Ismodm^). 

Here each state Ismodm^) = \sk) occupies one register for k = 1,2, ...,r. 
Now substituting the state identity (13) for the index state \s) the state |<l>i) 
is expressed as 

|$i) = |R0)(g)|(niMiSi+n2M2S2 + ... + n^M^s^)mod(p-l)) 

(g)|si)(g)|s2)(g)...(g)|Sr). 



41 



In order to remove unitarily the composite state | UkMkSk mod(p — 1)) in 
the state |<l>i) one needs to perform a scries of the modular multiphcation op- 
erations Mp^i{a, P, 7) and inverse modular addition operations ADDp_^{a, j3) 
on the state |$i), for example, 

1^ ^ -FniMi Mp_ i(ai^,/3i,7i) 



RO) (g) |niMi mod(p - l))|niMiSi mod(p - 1)) 

\{niMiSi + n2M2S2 + ... + rirMrSr) mod(p — 1)) 

\si)6d\s2)6d...6d\Sr) 



ADD,.^,,P,)+ I j^^^ ^ 1^^^^ ^^^^^ _ 1^^^^^^ ^^^^ _ 

\{n2M2S2 + n?,KU,s?, + ... + rirMrSr) mod(p — 1)) 

ki)(8)k2)(g)-(g)k.) 

|R0) IKMsSs + ngMgSs + ... + UrMrSr) mod(p - 1)) 

S1)6^\S2) 



The unitary transformation process in the example is stated below. The state 
\niMi mod(p— 1)) is first created by the unitary transformation: Fn^Mi |0) = 
\niMi mod(p— 1)), then the modular multiplication operation Mp_i(Q;i, 7^) 
acts on both the states |niMimod(p — 1)) and to generate the state 
|niMiSimod(p — 1)), and then the modular subtraction operation or the 
inverse modular addition operation ADDp_]^{ai^ (3]) acts on both the state 
|niMiSi mod(p — 1)) and the composite state | n^MfeSfc mod(j9 — 1)) so 
that the composite state is changed to the state \{n2M2S2 + n^M'^s-^ + ... + 
UrMrSr) mod(p — 1)). After these unitary transformations the unitary opera- 
tions Mp_-^^{a, P, 7) and -F^jv^i used to convert the states \niMi mod(p — 
1)) and |niMiSimod(p — 1)) back to the states |0). Clearly, the whole uni- 
tary transformation process really cancels the term riiMiSi mod{p— 1) in the 
composite state | nfeM^Sfc mod(p — 1)) of the state If this unitary 

transformation process is repeated r times with different unitary operations 

FukMk, Mp_i{ak,Pknk)^ and ADD+_-^{ak, Pk) fo^" ^ = l,2,...,r, then the 
composite state | n^MfeSfc mod(j9 — 1)) is ultimately converted into the 
state |0) in the state Therefore, it is shown that with the help of the 
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state identity (13) the index state |R0)(^ |s) can be efficiently converted 
into the state |$2) '■ 

IR-O) 1^) ^ 1*2) = |R0) (g) Ismodmi) 

|smod 777.2) ■■■ |s mod777.r). 

The state |$2) is a tension product of the r states {|smod777fc)} in the r 
different registers. In an analogue way, the index state |R0) |s) also can be 
efficiently converted into a tension product of the r states {|Mfcsmod(p — 1))} 
in the r different registers, 

|RO)®|s) ^ |$3) = |RO)(g) |Mismod(p- 1)) 

(g) |M2smod(p - 1)) (g) ... (g) |M,smod(p - 1)). 

Since there is the identity M^Sk = Mfesmod(p — 1) for k — 1,2, ...,r, the 
state |MfeSmod(p — 1)) = [M^Sfc mod(j9 — 1)). By using the inverse discrete 
logarithmic unitary operation U^^{g) the state |MfcSfcmod(p — 1)) can be 
converted into the state 1(5'*^'=)'''= mod p) which belongs to the state sub- 
space S{Cp<^k) of the cyclic subgroup Cp^k. On the other hand, using the 
inverse discrete logarithmic unitary operation U^g{g^^'') with the logarith- 
mic base g^'' the state jsmodm^), i.e., \sk), can also be converted to the 
same state |(gr-^fc)*fe modp). These results show that the auxiliary oracle uni- 
tary operation exp{—i6\{g^^'')^'' modp){{g^^'')'^'^ modp|} of the multiplicative 
cyclic group state subspace 5'(CpOfc) can be efficiently built out of the aux- 
iliary oracle unitary operation exp{—i6'(|smod777fe)(smod 777^1)} of the addi- 
tive cyclic group state subspace S{Z^^) or the auxiliary oracle unitary op- 
eration exp{— i^(|M;5,smod(p — l))(MfeSmod(p — 1)|)} of the additive cyclic 
group state space S{Zp_i). 

Now consider the multiplicative cyclic group state space S'(Cp„i). Sup- 
pose that the prime factors of the integer (p — 1) = Pi^P2^...p"'' are or- 
dered in magnitude: < < ■■■ < a-nd p"'' ~ O(logp). Then 
mi < 1712 < ... < rrir and Mi > M2 > ... > M^. As shown in section 2, 
the cyclic group Cp_i with order p — 1 is the direct product of r factor cyclic 
subgroups: Cp_i = Cp^i x Cp«2 x ... x Cp<^r. Each such cyclic subgroup Cp°-k 
corresponds to a state subspace S{Cp'^k) with dimension p^*" of the cyclic 
group state space S{Cp-i). For convenience, denote S{mk) = S{C j^k) with 
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rrik = p1* ■ It can be proven that the state \g^^'' modp) is in the state sub- 
space SiiJij.) for any index integer s. This is because the generator and the 
order of the cychc subgroup C^'^k is g^^'' and m^, respectively, then there 
holds the state identity \g'^^^'' modp) = |((jf*^fc)*™°'i'"fc modp) for any index 
s, while the latter state K^f*^*)'*'' modp) with the index Sk = smodnik is 
just in the state subspace S{mk)- Since the dimensional size of the cyclic 
group state subspace <S'(mjt) is just the order of the subgroup C o-k and 

mi < 7712 < ... < m,., then the state \g^'^'^ modp) is in the smallest state sub- 
space S'(mi), the state l^f^^^modp) in the second smallest subspace S{m2), 
and the state \g'^^'' modp) in the largest subspace S{mr) of the r state 
subspaces {S{mk)}. It follows from the equation (2) in section 2 that every 
state of the cyclic group state space 5'(Cp_i) can be expressed as 

l^^modp) = X (^A^2y»2.2 X ... X (^^'■)"^^'-modp) (14) 

The state identity (14) plays a similar role to the state identity (13) in decom- 
posing any state of the cyclic group state space S{Cp-i) as a tension product 
of the states of the state subspaces {S{mk)} of the factor cyclic subgroups 
{C "fc}. By the modular exponentiation operation the state K^f^*)* modp) 
of the state subspace S{mk) can be generated from the cyclic group state 
\g^ modp), 

|RO)0lf'modp) ^ |$4) = |RO)0|^*modp)|(y^'=)"modp) 
= |RO)(g)|/modp)|(^^'=)"'=modp). 

Repeating this modular exponentiation operation r times for k — 1,2, ...,r 
the state |R0) Ig'^modp) is converted into the state l^s), 

\RQ)<^\g"^odp) |$5) = |RO)(g)|/modp)(g)|(/^^)"^modp) 

|(^^^)^2 modp) (g) ... (g) \{g'^y^ modp). 

By using the state identity (14) and the modular exponentiation, the modular 
multiplication, and the COPY operation the state \g'^ modp) in the state 
|$5) can be removed unitarily and hence the state |R0) l^f'^modp) can be 
efficiently converted into a tension product of the r states {Kfif^*)^*^ modp)} 
of the r different subspaces {S{mk)} in the r different registers, 

|RO)(g)|/modp) ^ |$6) = |R0)(g)|((7'^^)^^modp) 

I {g^^y^ modp) (g) . .. I {g'^^y^ mod p) . 
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This unitary transformation is stated below. The states {[((ji^fc modp)} 
are first generated efficiently from the states {{{g^^'')^'' modp)} by the modu- 
lar exponentiation operations in temporary registers in the state |$5) because 
the integers {uk} are known, as shown before. Then by the modular multi- 
phcation operations the state | Ylkid^'')"'''^'' modp) is created efficiently from 
these states ||(gc^fc modp)}. The state identity (14) shows that the state 
I Ylkid'^'")"^''^'' inodp) is just the state l^f^modp). Then using the COPY oper- 
ation the state \g^ modp) can be removed from the state l^s). After these uni- 
tary operations those states | Jlfelfl'*^'')"'"*'" modp) and ||(g(^fc)"fc*fc modp)} in 
temporary registers are returned back to the state |0) and therefore the state 
l^e) is obtained. Note that these states \{g^^y modp) for different index j in 
the state |<l>6) belong to different subspaces {S{mj)} and also different regis- 
ters. It has been shown that any unknown state can be efficiently transferred 
to a larger state subspace from a small subspace in the Hilbert space [16]. 
Then the state | {g^^ Y modp) which is in the subspace S{mj) with the dimen- 
sional size rrij may be efficiently transferred to a larger subspace S{mk) with 
dimensional size > rrij. Since the dimensional size rrik for any subspace 
S{mk) is ~ O(logp) and there hold < < rrik and mi < 1712 < ... < m^, 
the unitary operation for the state transfer |(gf*'^-')'^ modp) K^f^*)'' modp) 
for 1 < J < /c < r always can be constructed efficiently [16]. Now the state 
transfer is carried out from a small subspace S{mk) {k ^ r) to the largest sub- 
space S{mr), that is, modp) ^(^gMryk modp) for k = 1,2, r — 1, 
then the state will be directly changed to a tension product of the r 
states {Kgf^'')*'^ modp), k = 1,2, ...,r} of the largest subspace S{mr) in the 
r different registers respectively: 

l^e) ^ 1*7) = |RO)(g)|(^^'')'^ modp) 

(g) \{g^^y^ modp) (g) ... (g) K^^O"- modp), 

where the state transfers can be performed in a parallel manner in the first 
r — 1 registers of the state \^q). The state j^y) shows that any state \g^ modp) 
of the cyclic group state space S{Cp-i) can be efficiently converted into a 
tension product of the r cyclic group states of the largest subspace S{m.,.). 
If the index state \s) is unknown, then in the state |$7) all these states 
modp), /c = l,2,...,r} are also unknown and they carry the com- 
plete information of the index state |s). Evidently, if the initial index state 
\s) or the initial cyclic group state \g'^ modp) is replaced with a superposition, 
then the above state transformations work as well. 
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For the discrete logarithmic problem it is much simple to generate unitar- 
ily the auxiliary oracle unitary operation UojsiG) = ^^[—'i^Djs^g)] with the 
diagonal operator Djs{g) = |RO)(RO| ^ l^f-''^ modp)((?-''^ modp| and j = 
or even j = {p — l)/pk from the basic oracle unitary operation UosiO) = 
exp[—i9Ds{g)] in polynomial time. Actually, this can be achieved directly by 
the state transformation: |R0) l^f^modp) |$4) without using any state 
identity (13) or (14). This is because (i) the integer b = g'^modp is given 
beforehand and hence the oracle unitary operation U os{d) can be efficiently 
constructed in advance, and {ii) the known state l^f^'modp) in the state |$4) 
can be efficiently converted to the state |0). Therefore, using the auxiliary 
oracle unitary operation Uojs{Q) and the standard quantum search algorithm 
one can solve efficiently the discrete logarithmic problem in polynomial time 
if the dimensional size for every cyclic group state subspace S{mk) is 
~ O(logp). This quantum discrete logarithmic algorithm is similar to the 
classical counterpart [21]. By combining with the quantum discrete logarith- 
mic algorithm in section 3 this algorithm will obtain much more speedup. 

However, the quantum search problem is much harder than the dis- 
crete logarithmic problem. The auxiliary oracle unitary operations corre- 
sponding to the states |$2) and |$7) still may be unsuitable for the quan- 
tum search task, for these factor states {|smodmfc)} in the state |$2) or 
{|(^^'-)^'=modp)} in the state l^r) that carry the complete information of 
the index state \s) are in the r different registers and this makes the search 
space too large for the quantum search problem. There are two possible 
schemes to solve this problem. One scheme is to compress unitarily all these 
r states in the r different registers into one register only in the state |<1>2) or 
I $7), and this scheme will lead to that the quantum search space is limited 
to the largest cyclic group state subspace S{Z^^) or S{mr). Since the dimen- 
sion of the state subspace S{Zmr) or S{mr) is ~ O(logp) the quantum 
search process may be implemented efficiently in these state subspaces. An- 
other is to keep only one desired state but remove unitarily the other r — 1 
states in the state |$2) or l^y). For example, one may let all those states 
|(^^Mr^sj modp) for j ^ k return unitarily to the known state |0) but only the 
desired state Kfi'^^'')*''' modp) be retained in the state |$7). It could be better 
that the two schemes are used together. In next section a possible algorithm 
is proposed on a universal quantum computer to further reduce the quan- 
tum search space for the state |$7) in the multiphcative cyclic group state 
S{Cp^i), while the reduction for the quantum search space on the basis of 
the state |$2) in the additive cyclic group state space S{Zp_i) is left in the 



46 



future work. 

5. An efficient reduction for the quantum search space on an 
ideal universal quantum computer 

A universal quantum computer [29, 38, 40] should be capable of comput- 
ing any recursive function in mathematics and any computational process on 

it obeys the unitary quantum dynamics in physics. Now a quantum com- 
putational program based on the reversible computation [26, 27] is designed 
to transform some states {Kg^^'Y'' modp)} back to the known state |0) but 
keep the desired state in the state l^y). This quantum program Qp may run 
on a universal quantum computer [29, 38, 40]. It is given by 

\nh) = |0) 

\h) = |0> 

For i = 1 to 

If \griy)) = |1) then \bh) {b,, + 1) end if 
When \gr{y)) = Do |^.(|/))|n,) = |1)|0) ^ |0)|0), |n„) = |0) ^ halt 

If \bh) = |0) then 

UgMr\fr{x))\gr{y)) 

Ur\fr{x))\gr{y)) 

else UgMr\fr{x))\gr{y)) end if 
end for. 

The quantum program Qp can be really written as Qp = {Qu}"^'' in which 
the basic operational unit Qu is repeated to execute rrir times. The basic 
operational unit Q^ may be formally expressed as Qu = {U^UgMrP'^}, here 
the operation P'^ executes the two statements: "If \gj.{y)) = |1) then \bh) — >■ 
\bh + 1) end if and "When = |1), Do Igriy^K) = |1)|0) ^ |0)|0), 

\nh) = |0) — > halt", the operation performs conditionally the unitary 
operation Ur if the branch-control state \bh) = |0), and the operation UgMr 
performs the unitary cyclic group operation of the cyclic subgroup Cp«r. 
The state \nh) is the halting state of the quantum program and belongs to 
an independent two-dimensional state space {|0), |1)}. The branch-control 
state \bh) belongs to a larger and independent state space {|0), |2), ...} 
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instead of a simple two-dimensional state space. The index i {I < i < rrir) 
stands for number of the basic operational unit Q„ to have been ahcady 
executed. In the quantum program the functions fr{x) and Qrix) are frix) = 
gr{x) = {g'^'^)^ modp for < x < rrir. Both the functions are periodic 
functions, fr{x) — frix + rrir) and Qriy) = QrijJ + ^r), and they also satisfy 
fr{x) — gr{x) = 1 for X = Omodm^. In the quantum program the cyclic 
group operation UgMr acts on only the state \fr{x)), 

UgMr\fr{x))\gr{y)) = \fr{x + l))\gr{y)), 
while the state transformation of the unitary operation Ur is defined by 

UAMx))\gr{y)) = I ^ ^"f"^- (15) 

r\jr\ j/\yr\yj/ | j/^ (x)) 1 1) , if X + y = mod . ^ ^ 

Note that for any given indices x and y {0 < x,y < rrir) there is a unique 
index i {1 < i < rrir) such that x + y + i — Omodm^. Therefore, there is 
a unique index i {1 < i < rrir) such that the state \ fr{x + i))\gr{y)) can be 
changed to the state \fr{x + i))\l) for given indices x and y by the unitary 
operation Ur in the quantum program. 

In order to explain clearly how the quantum program Qp works the state- 
ment "When = Do \gr{y))\nh) = |1)|0) ^ |0)|0), = |0) ^ 

halt" which involves in the halting protocol of quantum Turing machine [29] 
in the quantum program is not considered temporarily. The quantum pro- 
gram starts at the initial state \bh = 0)\fr{x))\gr{y)) of the quantum system 
of a universal quantum computer. The program first checks whether the state 
\gr{y)) is |1) or not. If yes, then the branch-control state \bh) — |0) is changed 
to the state otherwise it keeps unchanged. If the branch-control state \bh) 
is not |0), then the program performs only the cyclic group operation UgMr, 
otherwise {\bh) = |0)) it executes another unitary operation sequence, that is, 
it executes first the cycUc group operation UgMr and then the unitary opera- 
tion Ur- At the end of the step (i = 1) the quantum system is either (a) in the 
state \bh = l)\fr{x + 1))|1) if the initial state |(?r(l/)) = |1) or (6) in the state 
\bh = 0)\frix + l))\l) if the initial state \gr{y)) 7^ |1) but x + y + 1 = modm^ 
or (c) in the state \bh = 0)\fr{x+l))\gr{y)) if the initial state \gr{y)) 7^ |1) and 
x+y+1 7^ Omodm^. Therefore, at next step {i — 2) the three situations need 
to be considered, respectively. For the case (a), since the state \gr{y)) — |1) 
and the branch-control state \bh) — |1) the program performs only the cyclic 
group operation UgMr which converts the state \nh — l)\fr{x + l))\l) into the 
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state \nh — l)\fr{x + 2))|1). Evidently, once the state \gr{y)) is transformed 
to the state |1) and then the state \bh) to the state |1), the two states \gr{y)) 
and \bh) are kept at the state |1) in following steps and even to the end of the 
program, and hence the program performs only the cyclic group operation 
UgMr to the end (i = m^). Then at the end the quantum system is in the 
state \bh = l)\fr{x + mr))\l) = \bh = l)\fr{x))\l). For the case (6), since the 
state \gr{y)) = |1), then the branch-control state \bh) = |0) is changed to 
|1), that is, \bh = 0)|/,.(.T + 1))|1) is transformed to \bh = l)\frix + 1))|1) 
which will be further changed to the state \bh = l)|/r(a;))|l) at the end of 
the program, as explained in the case (a). For the case (c), just like at the 
end of the step (i = 1), at the end of the step {i — 2) there are also three 
situations to be considered again and these situations can be analyzed in a 
similar way given in the step {i = 1). The analysis shows that when the 
program is at the k—th step {i = k) such that x + y + k = Omodm^, the 
quantum system is changed from the state \bh = 0)\fr{x + k — l))\gr{y)) 
with \gr{y)) 7^ |1) at the beginning to the state \bfi — 0)\fr{x + k))\l) at 
the end of the A;— th step by the unitary operation Ur- At the following step 
{i = A; + 1) the branch-control state \bh) = |0) is transformed to the state 
|1). Then starting from the step {i = k + 1) the quantum system is acted on 
only by the cyclic group operation UgMr and this action continues to the end 
of the program. The final state {i — m^) of the quantum system therefore 
is \bh — l)\fr{x + mr))\l) — \bh — l)\fr{x))\l) . Thus, after execution of the 
whole quantum program one time the input state \bh — 0)\fr{x))\gr{y)) is 
changed to the output state \bh = l)|/r.(a;))|l). 

However, there is a precondition for the quantum program to work as 
stated above that once the state \gr{y)) is changed to the state |1) by the uni- 
tary operation f/,., the branch- control state \bfi) = |0) is changed to the state 
|1) and since then the branch- control state \bfi) = \1) is kept unchanged to the 
end of the program. This precondition may be achieved by the statement: 
"When \gr{y)) = Do \gr{y))\nh) = |1)|0) ^ |0)|0), |n/,) = |0) ^ 
halt" in the program. This statement is executed after the branch-control 
state \bfi) = |0) is changed to the state |1). The statement shows that once 
the state \gr{y)) goes to the state |l),the state \griy))\nh) = |1)|0) is changed 
to the state |0)|0) which means that the state \gr{y)) = |1) is changed to the 
state |0) conditionally when the halting state \nh) = |0), then the halting 
state \nh) — |0) is changed to the state and since then the halting state 
\nh) = |1) is kept unchanged to the end of the program which is executed by 
the instruction "halt" of the statement. There are three operations in the 
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statement, the first is the unitary operation f//i : \gr{y))\nh) = |1)|0) ^ |0)|0), 
the second is the trigger pulse on the halting qubit: \nh) = |0) ^ |1), and 
the last operation T(n) :"halt", which could involve in the unitary nonde- 
molition measurement operation on the halting qubit [29, 40], will kept the 
halting qubit at the state \nh) — |1) unchanged until the end of the pro- 
gram. It can be shown that if the halting state \nh) = |1) can be kept 
unchanged, then the branch- control state \bh) = |1) can also be kept un- 
changed. Suppose that at the i—th step of the program the state \gr{y)) 
goes to the state then at the {i + 1)— th step the state \bh) goes to 
the state |1) which will stop the unitary operation Ur later, and then the 
state \gr{y)) — |1) is changed to the state |0) and the halting state \nh) 
enters the state Note that the cyclic group operation UgMr does not af- 
fect the state \gr{y)) and the unitary operation Ur now is halted. Now at 
the (i -|- 2)— th step the conditional unitary operation Ub : \bh) — ^ \bh + 1) 
does not change the state \bh) — |1) because the state \gr{y)) = |0), and 
the unitary operation Uh : — |1)|0) ^ |0)|0) also has not net 

effect on the quantum system because the state \gr{y))\''T'h) = now. 
Though the unitary operation Pc : \nh) = |0) ^ |1) may change the halt- 
ing state \nh) = |1) back to the state |0), but the halting state \nh) = |1) 
is prevented by the halting operation T{i + 2) from the action of the uni- 
tary operation Pc so that it still keeps at the same state |1) at the step, 
and this is the key point for the whole quantum program. Thus, from the 
{i + 2)— th step to the end of the program the halting state is kept at the 
state |1) and hence the branch-control state is also kept at the state Ob- 
viously, when the whole quantum program includes the statement: "When 
\gr{y)) = Do \gr{y))\nh) = |1)|0) ^ |0)|0), \nh) = |0) ^ halt", 
the output state \nh)\bh)\fr{x))\griy)) is |l)|l)|/r(x))|0) if the input state is 
\Om\frix))\g.,iy)). 

One might ask one question: is the unitarity of the quantum program 
destroyed?, because there are different input states \0)\0)\ fr{x))\gr{y)) for 
different states \griy)), but the quantum program obtains the same output 
state |l)|l)|/r(a;))|0). Actually, there is a different index i {1 < i < m,.) such 
that {x + y + i) = Omodm^ for a different input state \0)\0)\fr{x))\gj.{y)) 
where the state \fr{x)) may be fixed. Then there is a different time (e.g., 
the i—th step) for the state \gr{y)) to go to the state |1) and for the halting 
operation T{i) to act on the quantum system. In effect the halting opera- 
tion T{i) acting on the quantum system at different time i is equivalent to 
that the quantum program in a different unitary operation acts on the input 
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state. According as the universal quantum computer model [29], the halting 
state \nh) should be periodically observed from the outside in a unitary and 
nondemolition form so that once the halting state is found at the state 1 1) the 
halting operation T{i) starts to act on the quantum system of the quantum 
computer. Before the halting operation T{i) takes an action the quantum 
system has already been made a unitary transformation U {i) which is clearly 
dependent on the time i. Obviously, this unitary transformation generally 
is different if the halting operation T{i) takes an action at a different time, 
while for the current quantum program this is clearly correct as well. There- 
fore, the same output state |1) |1) |/r(a;)) |0) is obtained from different input 
state \Q)\Q)\fr{x))\gr{y)) by a different unitary transformation in the current 
quantum program. Although different input states can not be converted to 
the same output state by a same unitary transformation, they are admit- 
ted to change to the same output state by different unitary transformations! 
Therefore, the quantum program keeps its unitarity. 

The key point to make the quantum program Qp work as stated above is 
that the halting protocol of quantum Turing machine is available and must be 
unitary. The unitarity for the halting protocol of quantum Turing machine is 
crucial for the quantum program when it is used to solve the quantum search 
problem based on the quantum unitary dynamics. Unlike the conventional 
measurement operation in quantum computation where the measurement op- 
eration usually could not be unitary and some information could loss during 
the measurement operation but these usually do not much affect the final 
computing results, the current halting operation must be unitary which con- 
tains the unitary nondemolition measurement operation since it could carry 
some information of the input state, as shown before, while the information 
could be necessary because in theory the inverse halting operation which 
contains the inverse unitary process of the nondemolition measurement op- 
eration could be necessary for solving quantum search problem based on the 
unitary quantum dynamics. 

The quantum program Qp is really assumed to run on an ideal universal 
quantum computer which has the unitary halting protocol of quantum Turing 
machine. Obviously, this program is trivial and could be irreversible if it runs 
on a conventional classical computer, but it could be simulated efficiently by 
the reversible computation [26, 27, 28]. The quantum program could also be 
efficiently performed on a quantum Turing machine (QTM) [29, 37, 40], as 
analyzed above. In fact, in a quantum Turing machine one may set directly 
the halting state \nh) in the program to be the QTM halting-control state to 
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control the quantum program. Once the state \gr{y)) is |1) in the program 
the halting state = |0) is changed to the state |1), then the program stops 
performing the operational branch consisting of the two unitary operations 
UgMr and Ur but turns to perform another operational branch of a single 
cyclic group operation UgMr to the end (i = m^), which ensures that the 
whole process of the program is unitary, as pointed out in [41c]. However, 
there hides a basic assumption that any input state of the quantum program 
is a single basis state. This basic assumption could ensure that the halting 
protocol of quantum Turing machine could be made available and unitary 
for the quantum program on an ideal universal quantum computer [29, 40, 
41a-41d]. 

However, if the input state of the quantum program is a superposition 
^s^s\nh = 0)\bh = 0)\fr{x{s)))\gr{y{s))), there seems to be a question 
whether the halting protocol can be available and unitary or not on a quan- 
tum Turing machine [41a-41d] when the quantum program is run on the 
QTM machine. This is because in this situation there are many operational 
branches to be executed simultaneously, and one does not known in advance 
when the state \gr{y{s))) is changed to the state |1) and actually for different 
index value s there may be a different time (the index i, 1 < i < rrir) for 
the state \gr{y{s))) to go to the state |1) in the program, although for any 
index value s the quantum program always stops at the same time when the 
index i — rUr- At present there is not a satisfactory halting protocol on a 
quantum Turing machine when the input state is a superposition. The detail 
discussion relevant to the halting problem of quantum Turing machine for 
this situation can be seen in Refs. [41a-41d]. However, it has been shown [29, 
40, 41a-41d] that there is an acceptable halting protocol of quantum Turing 
machine which may be made unitary if the input state is limited to be any 
single basis state on a quantum Turing machine. Then there should not be 
any problem to run the quantum program in a unitary form on a quantum 
Turing machine if its input state is limited to be a single basis state. One 
therefore concludes that if there existed a universal quantum Turing machine 
(UQTM) that on it any computational process obeys the unitary quantum 
dynamics in physics and it is capable of computing any computable func- 
tions in mathematics such as any recursive functions which of course include 
the current one computed by the quantum program, then such a universal 
quantum Turing machine could run the current quantum program in a uni- 
tary form when the input state is limited to be any single basis state for the 
program. 
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Though the quantum program could work on a universal quantum Turing 
machine and it has been shown that a quantum circuit model is equivalent to 
a universal quantum Turing machine in computation [39], it is still a challenge 
to construct an efficient quantum circuit for the quantum program. From the 
point of view of a quantum circuit model [38] the situation may be different. 
A quantum circuit model usually does not use any halting protocol and its 
input state can be either a single basis state or a superposition. However, in 
order to achieve the same result as the quantum program run on a universal 
quantum Turing machine, the quantum circuit model should be really able 
to simulate faithfully and efficiently the quantum program and especially the 
unitary halting protocol of quantum Turing machine used in the program. 
According to the definition (15) of the unitary operation Uj. the unitary 
operation [/jt for /c = 1, 2, r can be generally defined by 

|(^^'=)^modp)|(^^'=)-^modp) ^ |(y^'=)^modp)|l), < x < - 1, 

|(^^'=)^modp)|(^^'=)^modp) ^ |(^^'=)^modp)|(^^'=)^modp), 

x-\-y 7^ Omodmfc; 0<x, y<mfc — 1, 

while the conditional unitary operation U^is defined as 

f \hh)Uk{\{g^'Ymodp)\{g^'^)ymo<:\p)), i{h, = Q. 
\ \hh)\{g^''T m.oAp)\{g^^)y m.odp) , if 6^ 7^ 0. 

The unitary operations Uk and always can be built up efficiently since 
the dimension of the cyclic group state subspace S{mk) — {\{g^''Y vciodp)} 
is irik and ~ O(logp). The conditional unitary operation is de- 
pendent on the branch-control state \bh)- When the branch-control state 
\bh) 7^ |0) the conditional unitary operation does not act on the state 
I i^g^ky modp) I {g^'^y modp) for any indices x and y. If the unitary operator 
Uk can be written as Uk = cxp[—iHk] with the Hamiltonian Hk, then it is 
clear that Uj: = exp[—i{\bh = 0){bh = 0|) I^Hk]. As pointed out before, the 
key point for the quantum circuit is to simulate faithfully the unitary halting 
protocol of quantum Turing machine. Since the quantum circuit does not use 
the halting qubit, one may use an isolated two- level state control subspace to 
replace it. Denote the isolated two-level state subspace as {|c), |0)}. The two 
states in the subspace {|c), |0)} are not in the cyclic group state subspace 
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S{'mr) but still belong to the Hilbert space The control unit of the 

quantum circuit that simulates the halting protocol consists of a conditional 
trigger pulse and a conditional state-locking pulse. The conditional trigger 
pulse Pt is designed to change the state \gr{y)) to the state |c) of the control 
subspace when the state \gr{y)) is the state |1). It may be defined by 

' ^'-^^ ^/ly-vy;/ ^ \bh)\fr{x))\gr{y)), if ^.(y) 7^1 

Note that the conditional trigger pulse Pt is different from that trigger pulse 
Pc in the quantum program Qp. The conditional trigger pulse connects the 
state |c) of the control subspace to the state |1) of the cyclic group state sub- 
space S{mr). The time-dependent state-locking pulse PsLii^At)}), where 
{fi{t)} are time-dependent control parameters, can be only applied to the 
control subspace and does not affect any other states in the quantum system. 
Then the state-locking pulse does not make any net effect on the quantum 
system if the quantum system is not in the control subspace. Therefore, the 
conditional state-locking pulse can take an action on the quantum system 
only when the quantum system goes to the states of the control subspace. 
The ideal conditional state- locking pulse PsLiWi{t)}) could be defined by 

PkiW^imbk)\frix))\gr.iy)) = \bH)\frix))\gr{y)), t < , 
PsLiWM})\bh)\fr{x))\c) = \bh)\Mx)m, to<t< to + Ato, 

Pk{Wi{t)})\h)\fr{xm = |6,)|/,(x))|0), t > to + Ato, 

where to is the time at which the state |c) is generated completely by the 
trigger pulse Pt and evidently there are m^. different times to most for 
the quantum circuit Qc (see below), At^ is the interval that the state |c) is 
converted completely into the state |0) and it is shorter than the interval to 
execute the statement: "While \gr{y)) = Do Pt : \gr{y)) = |1) |c), 
PsL '■ k) ~^ quantum program Qc below). Here also assume 

that during the period {to = to — Sto < t < to) of the trigger pulse Pt 
the state-locking pulse has a negligible effect on the quantum system. The 
unitary transformation shows that after the state |c) is changed to the state 
|0), the state |0) is kept unchanged by the state- locking pulse and hence it 
will not change as the time. The conditional trigger pulse Pt instructs what 
time the conditional state-locking pulse PsLiifii^)}) starts to take an action 
on the quantum system because before the trigger pulse Pt changes the state 
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|1) of the cyclic group state subspace 5'(mr) to the state |c) of the control 
subspace the quantum system is not in the control subspace and hence the 
state-locking pulse has not a net effect on the quantum system. On the other 
hand, the conditional trigger pulse Pt can change the state 1 1) of the cyclic 
group state subspace S{'mr) to the state |c) of the control subspace only when 
the state \gr{y)) goes to the state Therefore, the conditional state-locking 
pulse PsLiWii^)}) '^^^ take an action on the quantum system only after the 
state \griy)) goes to the state |1). In effect the conditional state-locking pulse 
will replace the halting operation T{i) of the quantum program Qp to control 
the quantum circuit Qc, as can be seen below. This is because when the state 
|c) is changed to the state |0) of the control subspace and then the state |0) 
is locked by the state-locking pulse, the quantum system really leaves the 
state |c) and hence the trigger pulse Pt is no longer to take an action on 
the quantum system. Using the conditional unitary operation Ub '■ \gr{y) = 
\9r{y) = ^)\bh + 1), the conditional unitary operation C/^, and the 
cyclic group operation UgMr as well as the conditional trigger pulse Pt and 
the conditional state-locking pulse a possible unitary quantum circuit 
that simulates faithfully and efficiently the quantum program Qp could be 
constructed by 

Qc = {Pk ■■ OFF}{U^UgM.PtUbr^{Pk : ON}. 

In fact, given any input basis state this quantum circuit in theory is exactly 
equivalent to the following quantum program Q^. 

State-Locking Pulse : ON 

\bh) = |0> 
For i = 1 to 
If \gr{y)) = |1) then \bh) = \bh + 1) end if 
While \gr{y)) = Do : = |1) ^ |c), P^ : |c) ^ |0) 

If \bh) = |0) then 
UgMr\frix))\griy)) 

Ur\fr{x))\gr{y)) 

else UgMr\fr{x))\gr{y)) end if 
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end for 



State-Locking Pulse : OFF. 

The sole difference from the previous one Qp is that the halting qubit {|n/i)} 
of the quantum program Qp is replaced with the two-level state subspace 
{|c), |0)} in the quantum program Qc- Here the input state of the quantum 
circuit Qc is still limited to be a single basis state, although a quantum 
circuit does not limit any input state. In theory the output state of the 
quantum circuit Qc is \bh = 1) |/r(a;)) |0) if the input state is the single basis 
state \bh — ^)\fr{'^))\gr{y)) ■ The quantum program Qc shows that the state- 
locking pulse Pgj^ is first applied to the quantum system at the beginning of 
the quantum circuit. Because the quantum system may not be in the control 
subspace at the beginning, the state-locking pulse does not make an action 
on the quantum system, but it keeps applying and does not start to act on 
the quantum system until the quantum system goes to the state |c), and only 
at the end of the quantum circuit the state-locking pulse is switched off. 

The performance of the quantum circuit Qc usually may be mainly depen- 
dent on the state-locking pulse PsL{{'~Pi{^)})- The real unitary transformation 
during the period of the state-locking pulse applying to the quantum system 
should be generally written as 

PkiW^m)\hH)\fr{x))\gM) = \K)\fr{x))\gr{y)), t < , 
PsLiW^m)\bk)\fr{x))\c) 

= |6,)|/,(x))(£(t,to)|c) + e-^^(*'*°Vl-k(^,^o)P|0)), t>to, 

where ^{t,to) is a phase factor and the absolute amplitude value |£(t,to)| 
is zero in theory when the time t > + Atg for every time to- liereafter 
the absolute amplitude value to)| is referred to the one with the time 
t > to + Ato- The real amplitude value \e{t,to)\ may be dependent on the 
real physical process of the quantum circuit. The amplitude value |£(i,io)| 
measures how close the quantum circuit Qc is to the quantum program Qp, 
the closer the amplitude value \e{t, to) \ to zero, the closer the quantum circuit 
Qc to the quantum program Qp. The quantum circuit Qc is really equivalent 
to the quantum program Qp when the amplitude value |£:(t,to)| — exactly 
for every time to, but this could be possibly achieved only in an ideal case. 
However, the amplitude value |£(t,to)| could not be always equal to zero for 
every time if the input state of the quantum circuit is a superposition. This 
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is one reason why the input state of the quantum circuit Qc is still limited 
to be a single basis state, although the input state is allowed to be any state 
such as a superposition in the quantum circuit. Therefore, the quantum 
circuit Qc is really an approximation to the ideal quantum program Qp in a 
real physical process. In practice the conditional state-locking pulses need to 
be designed so that the amplitude value |£(i,io)| is as close zero as possible 
for every time t^. Hence this involves in quantum control in technique. The 
conditional state-locking pulse generally could be an amplitude- and phase- 
modulation time-dependent pulse. A better choice for the state-locking pulse 
could be an adiabatic pulse. 

If there existed a universal quantum computer that in computation obeys 
the unitary quantum dynamics in physics and is capable of computing any 
computable functions in mathematics such as any recursive functions, then 
such an ideal universal quantum computer would be enough powerful to 
solve efficiently the quantum search problem in the cyclic group state space. 
Actually, by taking the basis state \nh — 0)|fe/j = 0)|$7) as the input state 
of the quantum program Qp and setting the function fr{x) = {g'^'^)^ modp 
with X = Si and gr{y) = {g^^'Y modp with y = S2, after executing one time 
the quantum program the output state is given by 

|n, = 0)|6, = 0)(g)|(g^0'^niodp)|(^^0'^niodp)(g)|$;) 
^|$8) = |l)|l)(g)|(/^'0"niodp)|0)(g)|$;), 

where the state |$7) = Kg^'-y^ mod p)\{g^'-y'^ mod p) <^\^'y) and the state 
is given by 

1$;) = |R0) (^\{g^T modp) (g) ... (^\{g^r^ modp). 

This is because only the state \{g'^'^Y^ modp) (g) {{g^^'Y^ modp) in the first 
two registers of the state [$7) is made the unitary transformation by the quan- 
tum program Qp, while the state in other registers of the state |$7) keeps 
unchanged, and the output state of the quantum program is |l)|l)|/,.(a;))|0) 
if the input state is \0)\0)\fr{xY\gr{yYj ^ shown before. This unitary trans- 
formation removes the state | {g^'^Y'^ modp) in the second register of the state 
1^7). Next step is to remove unitarily the state {(g^"^)^^ modp) in the third 
register of the state |$7). First, both the branch-control state \bh) = |1) and 
the halting state \nh) = |1) are changed back to the state |0) in the state 
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I^g) and the state |0) in the register four of the state l^g) is absorbed by the 
register hbrary |R0). After these operations the state \^s) is changed to the 
state I $9) : 

|$9) = Inn = 0)|6, = 0) (g) Hg^'^' modp)\(g''^y' modp) (g) l^^) 

where the state l^g) = |R0) \ {g^'^'')'* modp) ... (g) \ (g^^y^ modp). Now 
taking the state [$9) as the input state of the quantum program Qp and set- 
ting the function fr{x) = {g'^^^'Y modp with x — Si and gr{y) = {g'^^'^Y modp 
with y — S2, the unitary transformation of the quantum program removes 
the state K^f*^'')*^ modp) of the state l^^g). In an analogue way, by setting 
the fixed function fr{x) = {g'^'^y modp with x = Si and the function 
9r{y) = (5'^'")^modp with y = Sk ior k = 2,3, ...,r, respectively, and then 
repeating r — 1 times the application of the quantum program Qp, the states 
Kg^'^Y'' modp) with k — 2,3, .., r are one by one removed unitarily from the 
state I $7) and ultimately the state |<l>7) is transformed to the desired state 
|R0) 1(5'^'')*^ modp), where the branch-control state |0) and the halting 
state |0) are also absorbed by the register library. This transformation may 
also be carried out in a parallel manner. In an analogue way, one may obtain 
the desired state |R0) | [g^^-yk modp) from the state |$7) for A; = 1, 2, r, 
respectively. Once the unitary state transformation |R0) l^f* modp) — >■ 
1^0) (3) I {g'^^'Y'^ modp) is efficiently achieved for k = 1,2, ...,r, the auxiliary 
oracle unitary operation U os,,{d) = exp[— ^^^/^^^((yf^'')] with the quantum-state 
diagonal operator = |RO)(RO| (g) K^f*^'')^* mod]9)((5f^'-)^'= modp] 

can be efficiently built out of the oracle unitary operation Uos{0)- This auxil- 
iary oracle unitary operation is applied only to the cyclic group state subspace 
S{mr). The state |R0) (g) modp) may be transferred to the register 

of the search space by a SWAP operation so as to obtain the auxiliary ora- 
cle unitary operation Uos^{0) which is applied only to the search space with 
dimension rrir ~ O(logp). Note that the register of the search space in which 
the index vector {sk} is determined may be different from all those registers 
in the state l^r). 

6. An efficient quantum search process in the cyclic group 
state subspaces _ 

When the auxiliary oracle unitary operation Uoski^) with k — 1,2, .., r is 
obtained the quantum search process to find the index can be efficiently 
constructed. As shown in the previous section 5, the initial state for the 
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quantum search process should be hmited to be a single basis state because 
both the input states of the quantum program Qp and the quantum circuit 
Qc are limited to be a single basis state. Therefore, the standard quantum 
search algorithm which usually starts at a superposition will not be used 
here to determine the index vector {sk}- Because the quantum search space 
now is limited to the cyclic group state subspace S{mk) with dimensional 
size rrik ~ O(logp), one may use every basis state of the cyclic group state 
subspace S{mk) as the initial state of the quantum search process without 
changing essentially the computational complexity of the quantum search 
process. For convenience, now the oracle unitary operation Uqs^. {0) acting on 
a basis state of the search space S{mr) can be rewritten as 

modp) = { -<-!i!;f:r,x ^^^^ 

where the register library |R0) is dropped without confusion. On the other 
hand, the basis state K^f^^'')^ modp) with < x < rrir can also be expressed 
in terms of the binary dynamical parameter {b^} (see sections 2.1 and 2.2), 

K^^Tmodp) =(g) {^Tk + blSk). 

k=l 

The dynamical parameters {b^} can be determined conveniently below for a 
given integer {g^'^)^ modp and will be used later in the construction of the 
quantum search process. The integer [g^'^)^ modp is first expressed in terms 
of the usual binary representation: 

{g^^Y modp = a„2"-i + a„_i2"-2 + ... + a22^ + ai2°, (17) 

where the qubit number n = [log2p] + 1 and a*; = or 1. Then the dynamical 
parameter 6^ is given by 6^ = (1 — 2ak) for k — 1,2, ..,n. Since the oracle 
unitary operation Uoski^) can generate a phase factor exp{—i9) only for the 
marked state \{g^^)^'' modp) but nothing for any other states of the search 
space S{mr), as shown in (16), one can only use this phase factor to distin- 
guish the marked state \{g^''y'' modp) from any other states of the search 
space. This search process to find the marked state can be made efficient due 
to the fact that the dimension of the search space S{mr) is ~ O(logp). 
Here, an efficient quantum search process is suggested to find the marked 
state in the search space. It is based on the use of the multiple-quantum 
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unitary operators [42] in the n— qubit quantum spin system (n — [log2p] + 1) 
whose Hilbert space contains the search space S{mr). 

A particularly important multiple-quantum transition to be used in the 
quantum search process is the highest-order quantum transition in the n— 
qubit quantum spin system. The highest-order quantum transition is defined 
as the transition between the ground state |00...0) and the highest excited 
state |ll...l) of the n— qubit spin system. In an n— qubit spin system the 
highest order of quantum transition is ±n [43] and the Hermitian highest- 
order quantum operators Qnx and Qny may be defined by 

Qn. = \{ltlt n + In), (18) 

and 

Qny = ^{itU K - I1I2 In), W 

where the operators — Ikx ± ihy for k — 1,2, ...,n. The highest-order 
quantum unitary operators are defined by Unn{0) — exp{—i29Qnij,) with 
H = x,y. They can induce an n— order quantum transition only between the 
ground state |00...0) and the highest excited state of the Hilbert space 

of the n— qubit spin system, but they do not induce any other order quantum 
transition between any pair of quantum states of the spin system different 
from the pair of the ground state and the highest excited state. This is be- 
cause the transition matrix elements {k\Qnfj,\r) = {r\Qn^\k)* = {fi = x,y) 
for any computational base |A;) and |r) of the spin system other than the 
ground state |00...0) or the highest excited state Since I^\Oi) = 0, 

I^\li) = 5ki\0k), I^\Oi) - 5ki\lk): and = [43] for k,l = l,2,...,n, 

the n— order quantum operator Qny acting on the ground state (the highest 
excited state) creates the highest excited state (the ground state), 

2g„joo...o) = i|ii...i) 

and 

2Qny\n...l) = -i|00...0). 

Then it is easy to turn out that there are the unitary transformations when 
the n— order quantum unitary operator Uny{0) = exp{—i29Qny) acts on the 
ground state and the highest excited state, respectively, 

exp(-i2^g„j,)|00...0) = cos^|00...0) + sin^|ll...l), {-n < 9 < n) (20) 
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and 

exp(-i2^g„j,)|ll...l) = cos^|ll...l) -sin^|00...0), (-tt < ^ < tt). (21) 

In particular, when 6 = 7r/4 the equally weighted superposition of the ground 
state and the highest excited state is obtained from (20), 

l^on) = exp(-^|g,^)|00...0) = ^(|00...0) + I11...1)). (22) 

The efficient quantum circuit for the highest-order quantum unitary op- 
erator Uny{0) is constructed below. By using the quantum-state diagonal 
operator Dq [15] the n— order quantum operator Qny may be expressed as 

]■ (23) 

On the other hand, the operator Qny can also be written as 

SiQny = (-i) ex.-p(iipI^)[Do, 2"7i^72a:---4x]+ exp(-i(/77^) (24) 

with n(p = 7r/2. The relation (24) can be proved below. Since there holds 
the unitary transformation: exp(— i(/77fc^)7^ exp(i(^7fc2) = exp(=pi(^)7^ [43] it 
follows from (18) and (19) that there exists the unitary transformation when 
the unitary operator exp{~i(plz) = Gxp[—i(f^^^^Ikz ] with n(f — 7r/2 acts 
on the n— order quantum operator Qny, 

ex.p{-i(pIz)Qny ex.p{i(plz) 
= ^[exp(-m99)7+72+ 7+ - exp(m99)7f 72^ 7„] 

— —-^[Do,'^"hxl2x---Inx\+ — ~Qnx 

Obviously, the relation (24) can be obtained directly from this unitary trans- 
formation. There is a general unitary transformation identity for the selective 
rotation operation Ct{9) [15], 

Ct{9)pCt{e)-' = p - {1 - cos e)[p,Dt]+ + I sin e[p,Dt] 

+2{1- COS 9) DtpDf (25) 

Taking p = 2"7i^72^...7„2., Df = Dq, and 9 = n, and noting that there holds 
the operator identity Dt2^Iixl2x---InxDt — for any index t, one obtains the 
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following relation from the identity (25), 



[^0,2" ^Ix ^2x ■ ■ ■ -^nxl + 




(26) 



With the help of the relations (24) and (26) and the Trotter-Suzuki formula 
[44] the quantum circuit for the highest-order quantum unitary operator 
Uny{0) can be constructed efficiently by 



where the unitary operation G — ex.^{—i92^~^Iixl2x---Inx/''^) can be decom- 
posed efficiently into a sequence of one- and two-qubit quantum gates [15]. 
Note that the norms | |-Do| | = 1 and \ \2'^Iir^l2x---Inx\ \ = 1- For a modest integer 
m the decomposition (27) converges quickly. 

With the help of the unitary transformations of (20) and (21) of the 
highest-order quantum unitary operator Uny{0) one can set up two quantum 
circuits to judge whether a known quantum state is just the solution of the 
quantum search problem or not in polynomial time. One quantum circuit 
UoniT^) is constructed with the selective inversion operation Ct(7r) and the 
highest-order quantum unitary operator Uny{9), 



where N — 2^. The quantum circuit t/on(7r) acting on the ground state 
|00...0) induces the highest-order quantum transition only when the selective 
inversion operation Ct(7r) with t = or — 1 is applied to either the ground 
state |00...0) or the highest excited state |ll...l), while for any other selective 
inversion operation Ct(7r) with t 7^ and — 1 which is applied to neither 
the ground state nor the highest excited state the quantum circuit [/on(7r) 
induces no transition from the ground state to the highest excited state. 

Generally, the quantum circuit t/on(^) with a general selective rotation op- 
eration CtiO) (— TT < 9 <'k) acting on the ground state induces the n— order 



Uny{0) = CXp{-i2eQny) 



(27) 



C/o„(7r)|00...0) = eMil^Qny)CtiTr)eM-il^Qny)\00...0) 



( I11...1), if i = 
= I -|ll...l), 

[ [00.. .0), iity^O,N-l 
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quantum transition with a transition probability dependent on the rotation 
angle 9, 

exp(i^7rQ„j^)Ct(6')exp(-i^7r(5„y)|00...0) 




P+IOO...O) + P_|ll...l) , ift = 
P+IOO...O) - P_|ll...l), iit = N -I 
I00...0), \it^^,N -I 



with P± = 1(1 ± exp(— i6')), but the quantum circuit does not induce any 
quantum transition when the selective rotation operation Ct{9) ^ Cq{9) and 
Cn-i{9)- When Ct{9) — Cq{9) or Cn-i{9) the unitary operation UQn{9) does 
induce the highest order quantum transition with the transition probability: 

Po,(^) = |P_|2 = i(l-cos^). 

The transition probability Pon(^) ^ 0.5 when 7r/2 < \9\ < vr. 

Using the total quantum circuit f/o„(^^) |00...0) {n/2 < \9\ < tt) which 
includes the initial state, i.e., the ground state, one can know whether the 
quantum state \t) is one of the two states: the ground state and the highest 
excited state or any other quantum state of the Hilbert space. If the quantum 
state \t) is either the ground state or the highest excited state, then one need 
use further another quantum circuit f/g^ to determine certainly the quantum 
state \t) to be the ground state or the highest excited state, 

C/^J00...0) = exp(i^7rg„j,)Co(7r/2)a(-7r/2)exp(-i^7r(5„J|00...0) 
f I00...0), if t = 

If the quantum state \t) is the highest excited state, which means that 
Cf (— 7r/2) = CAr_i(— 7r/2), then there is an n— order quantum transition from 
the ground state to the highest excited state under the action of the unitary 
operation [/q„ on the ground state, otherwise there is not such an n— order 
quantum transition and the ground state keeps unchanged. Now it is easy 
to judge if an unknown state \t) is the state |00...0)} or the state 
or any other state of the Hilbert space by using first the quantum circuit 
C/on(7r)|00...0) and then C/^„|00...0). 

It is well known in computational complexity that an NP-hard problem 
is hard to be solved on a classical computer, but whether a given solution 
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is just the real solution to the NP problem or not can be efficiently checked 
computationally. This fact is also true on a quantum computer. How to 
confirm whether a given state is the solution to the quantum search problem 
on a quantum computer? Suppose that the marked state \s) is the real 
solution to the quantum search problem and the oracle unitary operation 
of the marked state is Cs{0). For a given quantum state |r) one knows its 
dynamical parameter vector {a^}, an example can be seen in equation (17). 
One first sets up an auxiliary oracle unitary operation CtiO) — UorCs{0)U^j. : 



where the known unitary operator Uor that depends upon the dynamical 
parameter vector {a^} is given by [15a], 



Then using the quantum circuit f/o„(7r)|00...0) one knows whether the auxil- 
iary oracle unitary operation Ct{9) is just Co{9) or Cn-i{0) or any other 
one. If Ct{9) ^ Cq{9) and Cn-i{0), then the quantum state |r) is not 
the real solution |s) to the quantum search problem. If Ct{9) — Cq{9) 
or Cn_i{9), then the quantum circuit [/q^|00...0) is further used to judge 



whether Ct{9) = Co{9) or Ct{9) = Cn-i{9). If Ct{9) = Cn-i{9), then the 



state |r) is not the solution \s). But if Ct{9) = Co{9) one knows certainly 
the quantum state |r) is just the solution Therefore, in polynomial time 
one can confirm whether a given quantum state is just the solution to the 
quantum search problem. 

Both the ground state |00...0) and the highest excited state |ll...l) of 
the Hilbert space of the n— qubit spin system with n = [log2p] + 1 do not 
belong the search space S{mk). This is clear that the ground state |00...0) 
is not contained in the multiplicative cyclic group state space 5'(Cp_i), as 
shown in section 2.1. On the other hand, the prime p is less than 2" with 
n = [log2 p] + 1, that is, p < 2" — 1, then p — 1 < 2" — 2, which means that 
every cyclic group state \g^modp) of the state space S{Cp-i) corresponds 
one-to-one to its own integer gf^modp e Z+ which is never greater than 
2" — 2, while the highest excited state |ll...l) stands for the number 2" — 1. 
Therefore, the cyclic group state space S{Cp_i) does not contain the state 
|ll...l). By checking the quantum program Qp and the quantum circuit Qc 




n 



Uor =Yl {exp(i7r/fea;/2)exp(-i7ra^/fea;/2)}. 



k=l 
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in section 5 one can see that the state |00...0) has been used by the program 
Qp in the unitary transformation: \gr{y))\n'h) = |1)|0) ^ |0)|0) and by the 
quantum circuit Qc as the control state |0) of the control subspace {|c), |0)} 
with |c) 7^ |ll...l), but that state |00...0) is not in the current search space 
S{mr), while the state |ll...l) of the Hilbert space that contains the search 
space S{mr) is never used by both the program and the quantum circuit. 
Therefore, there hold the unitary transformations: Qp|00...0) = |00...0) and 
Qp\ll...l) = 1 11... 1) in the search space S'(mr). This is also in agreement with 
the fact that the oracle unitary operation Uos^. {&) does not make an effect on 
both the states. The quantum circuit C/on(7'') |00...0) now can be modified so 
that it can be used to determine the index of the oracle unitary operation 
Uosf,{0)- Obviously, the superposition |\I/on) of (22) is not in the search space 
S{mr) and not affected by the quantum program Qp. Now the ground state 
|00...0) in the superposition |^'on) is changed to the state |1) by the unitary 
operation Fi and further changed to the cyclic group state \ {g^^'')^ modp) by 
the cyclic group operation (UgMr)^, 

l*On) = -^(|00...0) + 111...1)) 

^^""^-'^l^m) = -^(|(/^Tmodp) + 111...1)). 

The unitary operation Fi and the cyclic group operation {UgMrY do not 
affect the highest-level state |ll...l). If now the superposition |\E'i„) is taken 
as the input state of the oracle unitary operation Uoski^), then in effect the 
input state is essentially a single basis state for the oracle unitary operation 
Uoski'^) s-iid also for the quantum program Qp. Since the highest-level state 
|ll...l) is not in the search space S{mr) and also not affected by the quantum 
program, there is only the single basis state |(5f^'')^modp) in the state \^in) 
that the quantum program can take an action, although the state |^in) is a 
STiperposition of two states. Now it is applied the oracle unitary operation 
Uoski'^) to the state |^i„). Note that only the basis state \ {g^^'~)^ raodp) in the 
state 1^1/ In) is affected by the oracle unitary operation. If the index Sk = x 
then the state \{g^'')^ modp) is inverted by the oracle unitary operation 
Uoski"^): otherwise the state |^in) keeps unchanged. After these unitary 
operations the state {{g^'^Y modp) is changed back to the ground state |0) 
by the inverse operations [{UgMr)'^]'^ and F^ . At the final step the inverse 
n— order quantum unitary operation exp^i^irQuy) is applied so that it can 
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be judged whether the index x — or not by the quantum measurement. 
The final result is given by 



The quantum measurement is carried out on the highest- level state |ll...l). 
Given the oracle unitary operation Uoski'^) one can try different index 
values X = 0, 1, ...,mr — 1 at most with the quantum circuit Q{x, Sk)\00...0) 
to find the index due to the fact that < < m^. If the highest-level 
state |ll...l) is measured in a high probability (~ 1), then the corresponding 
index value x is just the index s^. Again it is pointed out that the input 
state of the quantum program Qp is essentially limited to be a single basis 
state during the quantum search process. When the index values {sk} are 
obtained one may use the index identity (3) or (12) to compose the index s 
and hence the marked state \s) is found ultimately for the quantum search 
problem in the cychc group state space. 

7. Discussion 

In the paper an oracle-based quantum dynamical method has been set up 
to solve the quantum search problem in the cyclic group state space of the 
Hilbert space of an n— qubit pure-state quantum system. The main attempt 
is to make use of the symmetric properties and structures of groups to help 
solving a general unstructured quantum search problem in the Hilbert space. 

It is known that the hardness to solve an unstructured quantum search 
problem by a standard quantum search algorithm mainly originates from the 
low efficiency to amplify the amplitude of the marked state in the Hilbert 
space by the oracle unitary operation associated with other known quan- 
tum operations. This low amplitude-amplification efficiency results in that a 
standard quantum search algorithm generally can have only a square speedup 
over the best known classical counterparts. In order to break through the 
square speedup limitation it is necessary to develop other type of quantum 
search algorithms. The quantum dynamical method [15] may be a better 
choice, for it allows a parameterization description for an unknown quan- 
tum state such as the marked state and its oracle unitary operation in the 




11. ..1), a X — Sk 
00.. .0), iixy^Sk 
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Hilbert space of the n— qubit quantum system. Since the oracle unitary op- 
eration corresponds one-to-one to the unknown marked state, with the help 
of the parameterization description the quantum dynamical method makes 
it possible to manipulate at will the evolution process of the marked state 
in the quantum system and hence it also makes it possible to manipulate at 
will the oracle unitary operation. The quantum dynamical method is dif- 
ferent from the standard quantum search algorithm in that any quantum 
state of the Hilbert space can be described completely by a set of dynamical 
parameters and hence the quantum searching for the marked state can be 
indirectly achieved by determining the set of dynamical parameters which de- 
scribe completely the marked state instead by directly measuring the marked 
state. Therefore, amplification of amplitude of the marked state and the di- 
rect measurement on the marked state to obtain the complete information 
of the marked state, both are the key components of a standard quantum 
search algorithm, may not be necessary in the quantum dynamical method. 
In the quantum dynamical method the quantum measurement to output the 
computing results may be carried out on those states that carry the infor- 
mation of the marked state, while the complete information of the marked 
state can be further extracted from these computing results. In the paper the 
binary dynamical representation for a quantum state in the Hilbert space of 
an n— qubit quantum system is generalized to a general multi-base dynam- 
ical representation for a quantum state in a cyclic group state space and 
the quantum dynamical method therefore is extended to solve the quantum 
search problem in the cyclic group state space of the Hilbert space. 

A cyclic group state space of the Hilbert space of an n— qubit quantum 
system carries the symmetric property and structure of the cyclic group. A 
quantum search process may be affected greatly by the symmetric property 
and structure of the cyclic group if the quantum search is performed in the 
cyclic group state space. It is known that the amplitude-amplification effi- 
ciency for the marked state by the oracle unitary operation associated with 
other known unitary operations generally is inversely proportional to the 
square root of the dimensional size of the search space of the quantum search 
problem and this low efficiency results in the square speedup limitation for 
a standard quantum search algorithm. There is naturally a possible scheme 
to bypass this speedup limitation that the search space of the problem is 
hmited to a small subspace of the Hilbert space so that this speedup hmi- 
tation becomes less important or even unimportant in the quantum search 
problem. Therefore, it is a challenge how to reduce efficiently the search 
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space from the whole Hilbert space to its small subspaces in the unstruc- 
tured quantum search problem in the Hilbert space. It has been shown that 
the symmetric property and structure in spin space of an n— qubit spin sys- 
tem may be helpful for this reduction of search space. In the paper it is made 
a further emphasis and generalization for the idea that the symmetric prop- 
erty and structure of a quantum system or even a group may be employed to 
speed up the quantum search process through the scheme of the search-space 
reduction. A cyclic group is one of the simplest groups and its symmetric 
property and structure has been studied in detail and extensively. Therefore, 
it could be simplest and most convenient to exploit the symmetric property 
and structure of a cyclic group to help solving the quantum search problem 
in the cyclic group state space of the Hilbert space. 

The reversible mathematical-logic operations have been used extensively 
in quantum computation. They may be generally thought of as selective 
unitary operations in a quantum system and have be employed in the con- 
struction of quantum search processes in the cyclic group state space. A 
large advantage for the type of unitary operations is that the time evolution 
process of a quantum state in a complex multi-qubit quantum system may 
be traced more easily under the action of the mathematical-logic operations. 
However, in order to be reversible and unitary a logic operation in mathemat- 
ics usually needs to consume much more extra auxiliary qubits with respect 
to those unitary operators quantum physically. Since the dimensional size 
of the Hilbert space of a quantum system increases exponentially as the 
qubit number, it must be careful to use the mathematical-logic operations 
in solving a quantum search problem, otherwise these extra auxiliary qubits 
could lead to a large search space for the quantum search problem and make 
the quantum search process degraded. On the other hand, the conventional 
unitary operators, propagators, operations, or quantum gates in a quantum 
system in physics usually need not any extra auxiliary qubits except those 
artificial conditional unitary operations which usually need only few extra 
qubits to help to achieve some specific conditional operations instead of their 
unitarity. The time evolution process of a quantum state in a multi-qubit 
quantum system generally is complex and is not easy to trace under the ac- 
tion of the type of unitary operations. However, there is a general rule that 
any unknown quantum state can be efficiently transferred to a larger sub- 
space from a small subspace in the Hilbert space of the multi-qubit quantum 
system. Through this general rule one could set up the connection between 
the Hilbert space of the n— qubit quantum system and its cyclic group state 
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space for an unstructured quantum search problem. 

It has been shown that if there existed a universal quantum computer 
that in computation obeys the unitary quantum dynamics in physics and 
is capable of computing any computable functions in mathematics such as 
any recursive functions, then such a universal quantum computer would be 
enough powerful to solve efficiently the quantum search problem in the cyclic 
group state space. There seems to be a question whether such an ideal 
universal quantum computer existed or not. This question is due to the 
argument that a universal quantum computer could not have a satisfactory 
halting protocol when its input state is a superposition. However, as far as 
the present quantum search process in the multiplicative cyclic group state 
space is concerned, there seems not to be such a question because the input 
state in the quantum search process can be strictly limited to be a single 
basis state. An ideal quantum program, which is a key component of the 
present quantum search process, is designed for the efficient reduction of 
quantum search space for the quantum search problem. It has been shown in 
theory that this quantum program could be run unitarily on an ideal universal 
quantum computer when its input state is strictly limited to be a single 
basis state and hence it could be used to solve efficiently the quantum search 
problem in the cyclic group state space. Moreover, a quantum circuit is also 
designed to simulate efficiently the ideal quantum program. The key point for 
the quantum circuit is to use the state-locking pulse and the two-level control 
subspace to simulate efficiently the unitary halting protocol of the quantum 
program. Although at present a state-locking pulse that is continuously 
applied to a quantum system during the whole period of the quantum circuit 
is not popularly used in quantum computation, a large number of similar 
techniques have been used extensively in the conventional NMR experiments 
[43]. Obviously, it is necessary to further investigate in detail the quantum 
circuit in some important problems such as how to design a state-locking 
pulse with a better performance and how the state-locking pulse affects the 
practical computational complexity of the quantum circuit and the whole 
quantum search process. Evidently, it is possible to design simpler quantum 
program and quantum circuit than the present ones to solve the quantum 
search problem in the cyclic group state space. 

With the help of the symmetric property and structure of a cyclic group 
and the Chinese remainder theorem in number theory any quantum state 
in the cyclic group state space can be efficiently converted into a tension 
product of the states of the cyclic group state subspaces of the cyclic group 
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state space. There are the relations among these states of the cyche group 
state subspaces through the Chinese remainder theorem. These relations are 
important and may be further employed to develop efficient quantum search 
methods in the cyclic group state space in the future work. 
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